• Tom Sepez's avatar
    Restrict command processed by syscall_broker process. · a788b14f
    Tom Sepez authored
    As the syscall_broker process becomes more capable, it is important
    not to expose all the new capabilities to old clients which do no
    require them. Introduce a set of flags to track allowed commands.
    
    Rename broker_common.{cc,h} to broker_command.{cc,h} since all the
    contents are related to commands issued to the broker. Consolidate
    client/host side checks in this new file.
    
    Parameterize some tests so we cover both client/host denials.
    Tidy, brace initialize some vectors for readability.
    
    
    Cq-Include-Trybots: master.tryserver.chromium.android:android_arm64_dbg_recipe;master.tryserver.chromium.android:android_compile_x64_dbg;master.tryserver.chromium.android:android_compile_x86_dbg;master.tryserver.chromium.linux:linux_mojo
    Change-Id: I1ca23543f54e3eb5445bd476c24cf4a1bed06c37
    Reviewed-on: https://chromium-review.googlesource.com/801936
    Commit-Queue: Tom Sepez <tsepez@chromium.org>
    Reviewed-by: default avatarAntoine Labour <piman@chromium.org>
    Reviewed-by: default avatarJohn Abd-El-Malek <jam@chromium.org>
    Reviewed-by: default avatarRobert Sesek <rsesek@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#521568}
    a788b14f
broker_host.h 1.25 KB