Make sure only the right processes can access the profile path.

chrome/browser/chrome_browser_main.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chrome_browser_main.h"
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
@@ skipping 55 matching lines @@
 #include "chrome/browser/printing/cloud_print/cloud_print_proxy_service_factory.h"
 #include "chrome/browser/process_singleton.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/profiles/profile_manager.h"
 #include "chrome/browser/search_engines/search_engine_type.h"
 #include "chrome/browser/search_engines/template_url.h"
 #include "chrome/browser/search_engines/template_url_service.h"
 #include "chrome/browser/search_engines/template_url_service_factory.h"
 #include "chrome/browser/service/service_process_control.h"
 #include "chrome/browser/shell_integration.h"
+#include "chrome/browser/simple_message_box.h"
 #include "chrome/browser/translate/translate_manager.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/browser_init.h"
 #include "chrome/browser/ui/webui/chrome_url_data_manager_backend.h"
 #include "chrome/browser/ui/webui/sync_promo/sync_promo_trial.h"
 #include "chrome/common/child_process_logging.h"
 #include "chrome/common/chrome_constants.h"
 #include "chrome/common/chrome_paths.h"
 #include "chrome/common/chrome_result_codes.h"
 #include "chrome/common/chrome_switches.h"
@@ skipping 47 matching lines @@
 #include "chrome/browser/chromeos/cros_settings.h"
 #include "chrome/browser/chromeos/cros_settings_names.h"
 #endif
 
 // TODO(port): several win-only methods have been pulled out of this, but
 // BrowserMain() as a whole needs to be broken apart so that it's usable by
 // other platforms. For now, it's just a stub. This is a serious work in
 // progress and should not be taken as an indication of a real refactoring.
 
 #if defined(OS_WIN)
+#include <wtsapi32.h>
 #include "base/environment.h"  // For PreRead experiment.
 #include "base/win/windows_version.h"
 #include "chrome/browser/browser_trial.h"
 #include "chrome/browser/browser_util_win.h"
 #include "chrome/browser/chrome_browser_main_win.h"
 #include "chrome/browser/first_run/try_chrome_dialog_view.h"
 #include "chrome/browser/first_run/upgrade_util_win.h"
 #include "chrome/browser/fragmentation_checker_win.h"
 #include "chrome/browser/net/url_fixer_upper.h"
 #include "chrome/browser/rlz/rlz.h"
 #include "chrome/browser/ui/views/user_data_dir_dialog.h"
 #include "chrome/installer/util/helper.h"
 #include "chrome/installer/util/install_util.h"
 #include "chrome/installer/util/shell_util.h"
 #include "net/base/net_util.h"
 #include "printing/printed_document.h"
 #include "ui/base/l10n/l10n_util_win.h"
+
+// Make sure we link the wtsapi lib file in.
+#pragma comment(lib, "wtsapi32.lib")
 #endif  // defined(OS_WIN)
 
 #if defined(OS_MACOSX)
 #include <Security/Security.h>
 
 #include "base/mac/scoped_nsautorelease_pool.h"
 #include "chrome/browser/mac/install_from_dmg.h"
 #include "chrome/browser/mac/keystone_glue.h"
 #endif
 
@@ skipping 1009 matching lines @@
     FilePath resources_pack_path;
     PathService::Get(chrome::FILE_RESOURCES_PACK, &resources_pack_path);
     ResourceBundle::AddDataPackToSharedInstance(resources_pack_path);
 #endif  // defined(OS_MACOSX)
   }
 
 #if defined(TOOLKIT_GTK)
   g_set_application_name(l10n_util::GetStringUTF8(IDS_PRODUCT_NAME).c_str());
 #endif
 
+#if defined(OS_WIN)
+  // On windows notify the user if he is serving his profile from a network
+  // share as we don't officially support this setup yet.
+  // However we don't want to bother users on Cytrix setups as those have no
+  // real choice and their admins must be well aware of the risks associated.
+  LPWSTR buffer = NULL;
+  DWORD buffer_length = 0;
+  if (::WTSQuerySessionInformation(WTS_CURRENT_SERVER, WTS_CURRENT_SESSION,
+                                   WTSClientProtocolType,
+                                   &buffer, &buffer_length)) {
+    CHECK(buffer_length == sizeof(USHORT));
+    USHORT* type = reinterpret_cast<USHORT*>(buffer);
+    // Zero means local environment and we should warn the user if he runs
+    // on a network share.
+    if (*type == 0) {
+      bool profile_on_network = false;
+      FilePath temp_file;
+      // Try to create some non-empty temp file in the profile dir and use
+      // it to check if there is a reparse-point free path to it.
+      if (file_util::CreateTemporaryFileInDir(user_data_dir_, &temp_file) &&
+          file_util::WriteFile(temp_file, ".", 1)) {
+        FilePath normalized_temp_file;
+        if (!file_util::NormalizeFilePath(temp_file, &normalized_temp_file))
+          profile_on_network = true;
+      }
+      file_util::Delete(temp_file, false);
+      if (profile_on_network) {
+        browser::ShowErrorBox(NULL,
+                              l10n_util::GetStringUTF16(IDS_PRODUCT_NAME),
+                              l10n_util::GetStringUTF16(
+                                  IDS_PROFILE_ON_NETWORK_WARNING));
+      }
+    }  // Local session.
+    ::WTSFreeMemory(buffer);
+  }  // WTSQuerySessionInformation succeeded.
+#endif
+
   // These members must be initialized before returning from this function.
   master_prefs_.reset(new FirstRun::MasterPrefs);
   browser_init_.reset(new BrowserInit);
 
   std::string try_chrome =
       parsed_command_line().GetSwitchValueASCII(switches::kTryChromeAgain);
   if (!try_chrome.empty()) {
 #if defined(OS_WIN) && !defined(USE_AURA)
     // Setup.exe has determined that we need to run a retention experiment
     // and has lauched chrome to show the experiment UI.
@@ skipping 753 matching lines @@
     if (base::win::GetVersion() <= base::win::VERSION_XP)
       uma_name += "_XP";
 
     uma_name += "_PreRead";
     uma_name += pre_read == "1" ? "Enabled" : "Disabled";
     AddPreReadHistogramTime(uma_name.c_str(), time);
   }
 #endif
 #endif
 }