Add support for alternate window station.

sandbox/src/sandbox_policy.h

-// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
+// Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_SRC_SANDBOX_POLICY_H_
 #define SANDBOX_SRC_SANDBOX_POLICY_H_
 
+#include <string>
+
 #include "base/basictypes.h"
 #include "sandbox/src/sandbox_types.h"
 #include "sandbox/src/security_level.h"
 
 namespace sandbox {
 
 class TargetPolicy {
  public:
   // Increments the reference count of this object. The reference count must
   // be incremented if this interface is given to another component.
@@ skipping 55 matching lines @@
   // Return value: SBOX_ALL_OK if the setting succeeds and false otherwise.
   //
   // Note: JOB_OBJECT_XXXX constants are defined in winnt.h and documented at
   // length in:
   //   http://msdn2.microsoft.com/en-us/library/ms684152.aspx
   //
   // Note: the recommended level is JOB_RESTRICTED or JOB_LOCKDOWN.
   virtual ResultCode SetJobLevel(JobLevel job_level, uint32 ui_exceptions) = 0;
 
   // Specifies the desktop on which the application is going to run. If the
-  // desktop does not exist, it will be created.
-  virtual ResultCode SetDesktop(const wchar_t* desktop) = 0;
+  // desktop does not exist, it will be created. If alternate_winstation is
+  // set to true, the desktop will be created on an alternate window station.
+  virtual ResultCode SetAlternateDesktop(bool alternate_winstation) = 0;
+
+  // Returns the name of the alternate desktop used. If an alternate window
+  // station is specified, the name is prepended by the window station name,
+  // followed by a backslash.
+  virtual std::wstring GetAlternateDesktop() const = 0;
+
+  // Precreates the desktop and window station, if any.
+  virtual ResultCode CreateAlternateDesktop(bool alternate_winstation) = 0;
+
+  // Destroys the desktop and windows station.
+  virtual void DestroyAlternateDesktop() = 0;
 
   // Sets the integrity level of the process in the sandbox. The integrity level
   // will not take effect before you call LowerToken. User Interface Privilege
   // Isolation is not affected by this setting and will remain off for the
   // process in the sandbox.  This flag is valid on Vista only, it is silently
   // ignored on other OSes.  If you set the integrity level to a level higher
   // than your current level, the sandbox will fail to start.
   virtual ResultCode SetDelayedIntegrityLevel(IntegrityLevel level) = 0;
 
   // Sets the integrity level of the process in the sandbox. Both the initial
@@ skipping 62 matching lines @@
   // Adds a dll that will be unloaded in the target process before it gets
   // a chance to initialize itself. Typically, dlls that cause the target
   // to crash go here.
   virtual ResultCode AddDllToUnload(const wchar_t* dll_name) = 0;
 };
 
 }  // namespace sandbox
 
 
 #endif  // SANDBOX_SRC_SANDBOX_POLICY_H_