| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ | 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ |
| 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ | 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| 11 #include "base/strings/string16.h" |
| 11 #include "sandbox/win/src/sandbox_types.h" | 12 #include "sandbox/win/src/sandbox_types.h" |
| 12 #include "sandbox/win/src/security_level.h" | 13 #include "sandbox/win/src/security_level.h" |
| 13 | 14 |
| 14 namespace sandbox { | 15 namespace sandbox { |
| 15 | 16 |
| 16 class TargetPolicy { | 17 class TargetPolicy { |
| 17 public: | 18 public: |
| 18 // Windows subsystems that can have specific rules. | 19 // Windows subsystems that can have specific rules. |
| 19 // Note: The process subsystem(SUBSY_PROCESS) does not evaluate the request | 20 // Note: The process subsystem(SUBSY_PROCESS) does not evaluate the request |
| 20 // exactly like the CreateProcess API does. See the comment at the top of | 21 // exactly like the CreateProcess API does. See the comment at the top of |
| (...skipping 101 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 122 virtual ResultCode SetJobLevel(JobLevel job_level, uint32 ui_exceptions) = 0; | 123 virtual ResultCode SetJobLevel(JobLevel job_level, uint32 ui_exceptions) = 0; |
| 123 | 124 |
| 124 // Specifies the desktop on which the application is going to run. If the | 125 // Specifies the desktop on which the application is going to run. If the |
| 125 // desktop does not exist, it will be created. If alternate_winstation is | 126 // desktop does not exist, it will be created. If alternate_winstation is |
| 126 // set to true, the desktop will be created on an alternate window station. | 127 // set to true, the desktop will be created on an alternate window station. |
| 127 virtual ResultCode SetAlternateDesktop(bool alternate_winstation) = 0; | 128 virtual ResultCode SetAlternateDesktop(bool alternate_winstation) = 0; |
| 128 | 129 |
| 129 // Returns the name of the alternate desktop used. If an alternate window | 130 // Returns the name of the alternate desktop used. If an alternate window |
| 130 // station is specified, the name is prepended by the window station name, | 131 // station is specified, the name is prepended by the window station name, |
| 131 // followed by a backslash. | 132 // followed by a backslash. |
| 132 virtual std::wstring GetAlternateDesktop() const = 0; | 133 virtual base::string16 GetAlternateDesktop() const = 0; |
| 133 | 134 |
| 134 // Precreates the desktop and window station, if any. | 135 // Precreates the desktop and window station, if any. |
| 135 virtual ResultCode CreateAlternateDesktop(bool alternate_winstation) = 0; | 136 virtual ResultCode CreateAlternateDesktop(bool alternate_winstation) = 0; |
| 136 | 137 |
| 137 // Destroys the desktop and windows station. | 138 // Destroys the desktop and windows station. |
| 138 virtual void DestroyAlternateDesktop() = 0; | 139 virtual void DestroyAlternateDesktop() = 0; |
| 139 | 140 |
| 140 // Sets the integrity level of the process in the sandbox. Both the initial | 141 // Sets the integrity level of the process in the sandbox. Both the initial |
| 141 // token and the main token will be affected by this. If the integrity level | 142 // token and the main token will be affected by this. If the integrity level |
| 142 // is set to a level higher than the current level, the sandbox will fail | 143 // is set to a level higher than the current level, the sandbox will fail |
| (...skipping 75 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 218 // A NULL value for handle_name indicates all handles of the specified type. | 219 // A NULL value for handle_name indicates all handles of the specified type. |
| 219 // An empty string for handle_name indicates the handle is unnamed. | 220 // An empty string for handle_name indicates the handle is unnamed. |
| 220 virtual ResultCode AddKernelObjectToClose(const wchar_t* handle_type, | 221 virtual ResultCode AddKernelObjectToClose(const wchar_t* handle_type, |
| 221 const wchar_t* handle_name) = 0; | 222 const wchar_t* handle_name) = 0; |
| 222 }; | 223 }; |
| 223 | 224 |
| 224 } // namespace sandbox | 225 } // namespace sandbox |
| 225 | 226 |
| 226 | 227 |
| 227 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ | 228 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ |
| OLD | NEW |