23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
+
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
|
/*!
* @class OFSandbox OFSandbox.h ObjFW/OFSandbox.h
*
* @brief A class which describes a sandbox for the application.
*/
@interface OFSandbox: OFObject <OFCopying>
{
unsigned int _allowsStdIO: 1;
bool _allowsStdIO, _allowsReadingFiles, _allowsWritingFiles;
bool _allowsCreatingFiles, _allowsCreatingSpecialFiles;
bool _allowsTemporaryFiles, _allowsIPSockets, _allowsMulticastSockets;
bool _allowsChangingFileAttributes, _allowsFileOwnerChanges;
bool _allowsFileLocks, _allowsUNIXSockets, _allowsDNS;
bool _allowsUserDatabaseReading, _allowsFileDescriptorSending;
bool _allowsFileDescriptorReceiving, _allowsTape, _allowsTTY;
bool _allowsProcessOperations, _allowsExec, _allowsProtExec;
bool _allowsSetTime, _allowsPS, _allowsVMInfo;
bool _allowsChangingProcessRights, _allowsPF, _allowsAudio, _allowsBPF;
unsigned int _allowsReadingFiles: 1;
unsigned int _allowsWritingFiles: 1;
unsigned int _allowsCreatingFiles: 1;
unsigned int _allowsCreatingSpecialFiles: 1;
unsigned int _allowsTemporaryFiles: 1;
unsigned int _allowsIPSockets: 1;
unsigned int _allowsMulticastSockets: 1;
unsigned int _allowsChangingFileAttributes: 1;
unsigned int _allowsFileOwnerChanges: 1;
unsigned int _allowsFileLocks: 1;
unsigned int _allowsUNIXSockets: 1;
unsigned int _allowsDNS: 1;
unsigned int _allowsUserDatabaseReading: 1;
unsigned int _allowsFileDescriptorSending: 1;
unsigned int _allowsFileDescriptorReceiving: 1;
unsigned int _allowsTape: 1;
unsigned int _allowsTTY: 1;
unsigned int _allowsProcessOperations: 1;
unsigned int _allowsExec: 1;
unsigned int _allowsProtExec: 1;
unsigned int _allowsSetTime: 1;
unsigned int _allowsPS: 1;
unsigned int _allowsVMInfo: 1;
unsigned int _allowsChangingProcessRights: 1;
unsigned int _allowsPF: 1;
unsigned int _allowsAudio: 1;
unsigned int _allowsBPF: 1;
}
/*! Allows IO operations on previously allocated file descriptors. */
@property (nonatomic) bool allowsStdIO;
/*! Allows read access to the file system. */
@property (nonatomic) bool allowsReadingFiles;
|