[Win10 sandbox mitigations] Four new Win10 mitigations added.

sandbox/win/src/sandbox_policy.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_H_
 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_H_
 
 #include <stddef.h>
 #include <stdint.h>
 
@@ skipping 117 matching lines @@
   // Return value: SBOX_ALL_OK if the setting succeeds and false otherwise.
   //
   // Note: JOB_OBJECT_XXXX constants are defined in winnt.h and documented at
   // length in:
   //   http://msdn2.microsoft.com/en-us/library/ms684152.aspx
   //
   // Note: the recommended level is JOB_RESTRICTED or JOB_LOCKDOWN.
   virtual ResultCode SetJobLevel(JobLevel job_level,
                                  uint32_t ui_exceptions) = 0;
 
+  // Returns the job level.
+  virtual JobLevel GetJobLevel() const = 0;
+
   // Sets a hard limit on the size of the commit set for the sandboxed process.
   // If the limit is reached, the process will be terminated with
   // SBOX_FATAL_MEMORY_EXCEEDED (7012).
   virtual ResultCode SetJobMemoryLimit(size_t memory_limit) = 0;
 
   // Specifies the desktop on which the application is going to run. If the
   // desktop does not exist, it will be created. If alternate_winstation is
   // set to true, the desktop will be created on an alternate window station.
   virtual ResultCode SetAlternateDesktop(bool alternate_winstation) = 0;
 
@@ skipping 102 matching lines @@
   // Returns the handle which was actually shared with the target. This is
   // achieved by duplicating the handle to ensure that it is inheritable by
   // the target. The caller should treat this as an opaque value.
   virtual void* AddHandleToShare(HANDLE handle) = 0;
 };
 
 }  // namespace sandbox
 
 
 #endif  // SANDBOX_WIN_SRC_SANDBOX_POLICY_H_