[Win10 sandbox mitigations] Four new Win10 mitigations added.

sandbox/win/src/process_mitigations.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/process_mitigations.h"
 
 #include <stddef.h>
 
 #include <algorithm>
 
@@ skipping 156 matching lines @@
     PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY policy = {};
     policy.DisableExtensionPoints = true;
 
     if (!set_process_mitigation_policy(ProcessExtensionPointDisablePolicy,
                                        &policy, sizeof(policy)) &&
         ERROR_ACCESS_DENIED != ::GetLastError()) {
       return false;
     }
   }
 
+  if (version < base::win::VERSION_WIN10)
+    return true;
+
+  // Enable font policies.
+  if (flags & MITIGATION_NONSYSTEM_FONT_DISABLE) {
+    PROCESS_MITIGATION_FONT_DISABLE_POLICY policy = {0};
+    policy.DisableNonSystemFonts = true;
+
+    if (!set_process_mitigation_policy(ProcessFontDisablePolicy, &policy,
+                                       sizeof(policy)) &&
+        ERROR_ACCESS_DENIED != ::GetLastError()) {
+      return false;
+    }
+  }
+
+  if (version < base::win::VERSION_WIN10_10586)
+    return true;
+
+  // Enable image load policies.
+  if (flags & MITIGATION_IMAGE_LOAD_NO_REMOTE ||
+      flags & MITIGATION_IMAGE_LOAD_NO_LOW_LABEL) {
+    PROCESS_MITIGATION_IMAGE_LOAD_POLICY policy = {0};
+    if (flags & MITIGATION_IMAGE_LOAD_NO_REMOTE)
+      policy.NoRemoteImages = true;
+    if (flags & MITIGATION_IMAGE_LOAD_NO_LOW_LABEL)
+      policy.NoLowMandatoryLabelImages = true;
+
+    if (!set_process_mitigation_policy(ProcessImageLoadPolicy, &policy,
+                                       sizeof(policy)) &&
+        ERROR_ACCESS_DENIED != ::GetLastError()) {
+      return false;
+    }
+  }
+
   return true;
 }
 
 void ConvertProcessMitigationsToPolicy(MitigationFlags flags,
-                                       DWORD64* policy_flags, size_t* size) {
+                                       DWORD64* policy_flags,
+                                       size_t* size,
+                                       bool* no_child_processes) {
   base::win::Version version = base::win::GetVersion();
 
   *policy_flags = 0;
 #if defined(_WIN64)
   *size = sizeof(*policy_flags);
 #elif defined(_M_IX86)
   // A 64-bit flags attribute is illegal on 32-bit Win 7 and below.
   if (version < base::win::VERSION_WIN8)
     *size = sizeof(DWORD);
   else
     *size = sizeof(*policy_flags);
 #else
 #error This platform is not supported.
 #endif
+  *no_child_processes = false;
 
   // Nothing for Win XP or Vista.
   if (version <= base::win::VERSION_VISTA)
     return;
 
   // DEP and SEHOP are not valid for 64-bit Windows
 #if !defined(_WIN64)
   if (flags & MITIGATION_DEP) {
     *policy_flags |= PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE;
     if (!(flags & MITIGATION_DEP_NO_ATL_THUNK))
@@ skipping 39 matching lines @@
 
   if (flags & MITIGATION_WIN32K_DISABLE) {
     *policy_flags |=
         PROCESS_CREATION_MITIGATION_POLICY_WIN32K_SYSTEM_CALL_DISABLE_ALWAYS_ON;
   }
 
   if (flags & MITIGATION_EXTENSION_DLL_DISABLE) {
     *policy_flags |=
         PROCESS_CREATION_MITIGATION_POLICY_EXTENSION_POINT_DISABLE_ALWAYS_ON;
   }
+
+  if (version < base::win::VERSION_WIN10)
+    return;
+
+  if (flags & MITIGATION_NONSYSTEM_FONT_DISABLE) {
+    *policy_flags |= PROCESS_CREATION_MITIGATION_POLICY_FONT_DISABLE_ALWAYS_ON;
+  }
+
+  if (version < base::win::VERSION_WIN10_10586)
+    return;
+
+  if (flags & MITIGATION_IMAGE_LOAD_NO_REMOTE) {
+    *policy_flags |=
+        PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_NO_REMOTE_ALWAYS_ON;
+  }
+
+  if (flags & MITIGATION_IMAGE_LOAD_NO_LOW_LABEL) {
+    *policy_flags |=
+        PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_NO_LOW_LABEL_ALWAYS_ON;
+  }
+
+  if (flags & MITIGATION_CHILD_PROCESS_CREATION_RESTRICTED) {
+    *no_child_processes = true;
+  }
 }
 
 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags) {
   base::win::Version version = base::win::GetVersion();
 
   // Windows XP SP2+.
   if (version < base::win::VERSION_VISTA) {
     return flags & (MITIGATION_DEP |
                     MITIGATION_DEP_NO_ATL_THUNK);
   }
@@ skipping 39 matching lines @@
       ptr += size;
     }
   }
 #endif
 
   return true;
 }
 
 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags) {
   // All of these mitigations can be enabled after startup.
-  return !(flags & ~(MITIGATION_HEAP_TERMINATE |
-                     MITIGATION_DEP |
-                     MITIGATION_DEP_NO_ATL_THUNK |
-                     MITIGATION_RELOCATE_IMAGE |
-                     MITIGATION_RELOCATE_IMAGE_REQUIRED |
-                     MITIGATION_BOTTOM_UP_ASLR |
-                     MITIGATION_STRICT_HANDLE_CHECKS |
-                     MITIGATION_EXTENSION_DLL_DISABLE |
-                     MITIGATION_DLL_SEARCH_ORDER |
-                     MITIGATION_HARDEN_TOKEN_IL_POLICY));
+  return !(
+      flags &
+      ~(MITIGATION_HEAP_TERMINATE |
+        MITIGATION_DEP |
+        MITIGATION_DEP_NO_ATL_THUNK |
+        MITIGATION_RELOCATE_IMAGE |
+        MITIGATION_RELOCATE_IMAGE_REQUIRED |
+        MITIGATION_BOTTOM_UP_ASLR |
+        MITIGATION_STRICT_HANDLE_CHECKS |
+        MITIGATION_EXTENSION_DLL_DISABLE |
+        MITIGATION_DLL_SEARCH_ORDER |
+        MITIGATION_HARDEN_TOKEN_IL_POLICY |
+        MITIGATION_WIN32K_DISABLE |
+        MITIGATION_NONSYSTEM_FONT_DISABLE |
+        MITIGATION_IMAGE_LOAD_NO_REMOTE |
+        MITIGATION_IMAGE_LOAD_NO_LOW_LABEL));
 }
 
 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags) {
   // These mitigations cannot be enabled prior to startup.
   return !(flags & (MITIGATION_STRICT_HANDLE_CHECKS |
                     MITIGATION_DLL_SEARCH_ORDER));
 }
 
 }  // namespace sandbox