OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ | 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ |
6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ | 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 | 9 |
10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
(...skipping 28 matching lines...) Expand all Loading... |
39 FILES_ALLOW_DIR_ANY, // Allows open or create with directory semantics | 39 FILES_ALLOW_DIR_ANY, // Allows open or create with directory semantics |
40 // only. | 40 // only. |
41 HANDLES_DUP_ANY, // Allows duplicating handles opened with any | 41 HANDLES_DUP_ANY, // Allows duplicating handles opened with any |
42 // access permissions. | 42 // access permissions. |
43 HANDLES_DUP_BROKER, // Allows duplicating handles to the broker process. | 43 HANDLES_DUP_BROKER, // Allows duplicating handles to the broker process. |
44 NAMEDPIPES_ALLOW_ANY, // Allows creation of a named pipe. | 44 NAMEDPIPES_ALLOW_ANY, // Allows creation of a named pipe. |
45 PROCESS_MIN_EXEC, // Allows to create a process with minimal rights | 45 PROCESS_MIN_EXEC, // Allows to create a process with minimal rights |
46 // over the resulting process and thread handles. | 46 // over the resulting process and thread handles. |
47 // No other parameters besides the command line are | 47 // No other parameters besides the command line are |
48 // passed to the child process. | 48 // passed to the child process. |
49 PROCESS_ALL_EXEC, // Allows the creation of a process and return fill | 49 PROCESS_ALL_EXEC, // Allows the creation of a process and return full |
50 // access on the returned handles. | 50 // access on the returned handles. |
51 // This flag can be used only when the main token of | 51 // This flag can be used only when the main token of |
52 // the sandboxed application is at least INTERACTIVE. | 52 // the sandboxed application is at least INTERACTIVE. |
53 EVENTS_ALLOW_ANY, // Allows the creation of an event with full access. | 53 EVENTS_ALLOW_ANY, // Allows the creation of an event with full access. |
54 EVENTS_ALLOW_READONLY, // Allows opening an even with synchronize access. | 54 EVENTS_ALLOW_READONLY, // Allows opening an even with synchronize access. |
55 REG_ALLOW_READONLY, // Allows readonly access to a registry key. | 55 REG_ALLOW_READONLY, // Allows readonly access to a registry key. |
56 REG_ALLOW_ANY, // Allows read and write access to a registry key. | 56 REG_ALLOW_ANY, // Allows read and write access to a registry key. |
57 FAKE_USER_GDI_INIT // Fakes user32 and gdi32 initialization. This can | 57 FAKE_USER_GDI_INIT // Fakes user32 and gdi32 initialization. This can |
58 // be used to allow the DLLs to load and initialize | 58 // be used to allow the DLLs to load and initialize |
59 // even if the process cannot access that subsystem. | 59 // even if the process cannot access that subsystem. |
60 }; | 60 }; |
61 | 61 |
62 // Increments the reference count of this object. The reference count must | 62 // Increments the reference count of this object. The reference count must |
63 // be incremented if this interface is given to another component. | 63 // be incremented if this interface is given to another component. |
64 virtual void AddRef() = 0; | 64 virtual void AddRef() = 0; |
65 | 65 |
66 // Decrements the reference count of this object. When the reference count | 66 // Decrements the reference count of this object. When the reference count |
67 // is zero the object is automatically destroyed. | 67 // is zero the object is automatically destroyed. |
68 // Indicates that the caller is done with this interface. After calling | 68 // Indicates that the caller is done with this interface. After calling |
69 // release no other method should be called. | 69 // release no other method should be called. |
(...skipping 177 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
247 // Returns the handle which was actually shared with the target. This is | 247 // Returns the handle which was actually shared with the target. This is |
248 // achieved by duplicating the handle to ensure that it is inheritable by | 248 // achieved by duplicating the handle to ensure that it is inheritable by |
249 // the target. The caller should treat this as an opaque value. | 249 // the target. The caller should treat this as an opaque value. |
250 virtual void* AddHandleToShare(HANDLE handle) = 0; | 250 virtual void* AddHandleToShare(HANDLE handle) = 0; |
251 }; | 251 }; |
252 | 252 |
253 } // namespace sandbox | 253 } // namespace sandbox |
254 | 254 |
255 | 255 |
256 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ | 256 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_H_ |
OLD | NEW |