syscall_sandbox.h

Go to the documentation of this file.

// Copyright (c) 2020 The Bitcoin Core developers
// Distributed under the MIT software license, see the accompanying
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
 
#ifndef BITCOIN_UTIL_SYSCALL_SANDBOX_H
#define BITCOIN_UTIL_SYSCALL_SANDBOX_H
 
enum class SyscallSandboxPolicy {
    // 1. Initialization
    INITIALIZATION,
    INITIALIZATION_DNS_SEED,
    INITIALIZATION_LOAD_BLOCKS,
    INITIALIZATION_MAP_PORT,
 
    // 2. Steady state (non-initialization, non-shutdown)
    MESSAGE_HANDLER,
    NET,
    NET_ADD_CONNECTION,
    NET_HTTP_SERVER,
    NET_HTTP_SERVER_WORKER,
    NET_OPEN_CONNECTION,
    SCHEDULER,
    TOR_CONTROL,
    TX_INDEX,
    VALIDATION_SCRIPT_CHECK,
 
    // 3. Shutdown
    SHUTOFF,
};
 
void SetSyscallSandboxPolicy(SyscallSandboxPolicy syscall_policy);
 
#if defined(USE_SYSCALL_SANDBOX)
[[nodiscard]] bool SetupSyscallSandbox(bool log_syscall_violation_before_terminating);
 
void TestDisallowedSandboxCall();
#endif // defined(USE_SYSCALL_SANDBOX)
 
#endif // BITCOIN_UTIL_SYSCALL_SANDBOX_H