Add sandbox support for Windows process mitigations

sandbox/win/src/sandbox_types.h

 // Copyright (c) 2006-2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_WIN_SRC_SANDBOX_TYPES_H_
 #define SANDBOX_WIN_SRC_SANDBOX_TYPES_H_
 
 namespace sandbox {
 
 // Operation result codes returned by the sandbox API.
@@ skipping 25 matching lines @@
   // Failed to create the alternate window station.
   SBOX_ERROR_CANNOT_CREATE_WINSTATION = 12,
   // Failed to switch back to the interactive window station.
   SBOX_ERROR_FAILED_TO_SWITCH_BACK_WINSTATION = 13,
   // The supplied AppContainer is not valid.
   SBOX_ERROR_INVALID_APP_CONTAINER = 14,
   // The supplied capability is not valid.
   SBOX_ERROR_INVALID_CAPABILITY = 15,
   // There is a failure initializing the AppContainer.
   SBOX_ERROR_CANNOT_INIT_APPCONTAINER = 16,
+  // Initializing or updating ProcThreadAttributes failed.
+  SBOX_ERROR_PROC_THREAD_ATTRIBUTES = 17,
   // Placeholder for last item of the enum.
   SBOX_ERROR_LAST
 };
 
 // If the sandbox cannot create a secure environment for the target, the
 // target will be forcibly terminated. These are the process exit codes.
 enum TerminationCodes {
   SBOX_FATAL_INTEGRITY = 7006,       // Could not set the integrity level.
   SBOX_FATAL_DROPTOKEN = 7007,       // Could not lower the token.
   SBOX_FATAL_FLUSHANDLES = 7008,     // Failed to flush registry handles.
   SBOX_FATAL_CACHEDISABLE = 7009,    // Failed to forbid HCKU caching.
-  SBOX_FATAL_CLOSEHANDLES = 7010     // Failed to close pending handles.
+  SBOX_FATAL_CLOSEHANDLES = 7010,    // Failed to close pending handles.
+  SBOX_FATAL_MITIGATION = 7011       // Could not set the mitigation policy.
 };
 
 class BrokerServices;
 class TargetServices;
 
 // Contains the pointer to a target or broker service.
 struct SandboxInterfaceInfo {
   BrokerServices* broker_services;
   TargetServices* target_services;
 };
@@ skipping 10 matching lines @@
   INTERCEPTION_EAT,
   INTERCEPTION_SIDESTEP,        // Preamble patch
   INTERCEPTION_SMART_SIDESTEP,  // Preamble patch but bypass internal calls
   INTERCEPTION_UNLOAD_MODULE,   // Unload the module (don't patch)
   INTERCEPTION_LAST             // Placeholder for last item in the enumeration
 };
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_WIN_SRC_SANDBOX_TYPES_H_