OLD | NEW |
1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_SRC_SYNC_POLICY_H__ | 5 #ifndef SANDBOX_SRC_SYNC_POLICY_H__ |
6 #define SANDBOX_SRC_SYNC_POLICY_H__ | 6 #define SANDBOX_SRC_SYNC_POLICY_H__ |
7 | 7 |
| 8 #include <stdint.h> |
| 9 |
8 #include <string> | 10 #include <string> |
9 | 11 |
10 #include "base/basictypes.h" | |
11 #include "base/strings/string16.h" | 12 #include "base/strings/string16.h" |
12 #include "sandbox/win/src/crosscall_server.h" | 13 #include "sandbox/win/src/crosscall_server.h" |
13 #include "sandbox/win/src/nt_internals.h" | 14 #include "sandbox/win/src/nt_internals.h" |
14 #include "sandbox/win/src/policy_low_level.h" | 15 #include "sandbox/win/src/policy_low_level.h" |
15 #include "sandbox/win/src/sandbox_policy.h" | 16 #include "sandbox/win/src/sandbox_policy.h" |
16 | 17 |
17 namespace sandbox { | 18 namespace sandbox { |
18 | 19 |
19 enum EvalResult; | 20 enum EvalResult; |
20 | 21 |
21 // This class centralizes most of the knowledge related to sync policy | 22 // This class centralizes most of the knowledge related to sync policy |
22 class SyncPolicy { | 23 class SyncPolicy { |
23 public: | 24 public: |
24 // Creates the required low-level policy rules to evaluate a high-level | 25 // Creates the required low-level policy rules to evaluate a high-level |
25 // policy rule for sync calls, in particular open or create actions. | 26 // policy rule for sync calls, in particular open or create actions. |
26 // name is the sync object name, semantics is the desired semantics for the | 27 // name is the sync object name, semantics is the desired semantics for the |
27 // open or create and policy is the policy generator to which the rules are | 28 // open or create and policy is the policy generator to which the rules are |
28 // going to be added. | 29 // going to be added. |
29 static bool GenerateRules(const wchar_t* name, | 30 static bool GenerateRules(const wchar_t* name, |
30 TargetPolicy::Semantics semantics, | 31 TargetPolicy::Semantics semantics, |
31 LowLevelPolicy* policy); | 32 LowLevelPolicy* policy); |
32 | 33 |
33 // Performs the desired policy action on a request. | 34 // Performs the desired policy action on a request. |
34 // client_info is the target process that is making the request and | 35 // client_info is the target process that is making the request and |
35 // eval_result is the desired policy action to accomplish. | 36 // eval_result is the desired policy action to accomplish. |
36 static NTSTATUS CreateEventAction(EvalResult eval_result, | 37 static NTSTATUS CreateEventAction(EvalResult eval_result, |
37 const ClientInfo& client_info, | 38 const ClientInfo& client_info, |
38 const base::string16 &event_name, | 39 const base::string16& event_name, |
39 uint32 event_type, | 40 uint32_t event_type, |
40 uint32 initial_state, | 41 uint32_t initial_state, |
41 HANDLE *handle); | 42 HANDLE* handle); |
42 static NTSTATUS OpenEventAction(EvalResult eval_result, | 43 static NTSTATUS OpenEventAction(EvalResult eval_result, |
43 const ClientInfo& client_info, | 44 const ClientInfo& client_info, |
44 const base::string16 &event_name, | 45 const base::string16& event_name, |
45 uint32 desired_access, | 46 uint32_t desired_access, |
46 HANDLE *handle); | 47 HANDLE* handle); |
47 }; | 48 }; |
48 | 49 |
49 } // namespace sandbox | 50 } // namespace sandbox |
50 | 51 |
51 #endif // SANDBOX_SRC_SYNC_POLICY_H__ | 52 #endif // SANDBOX_SRC_SYNC_POLICY_H__ |
OLD | NEW |