OLD | NEW |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ | 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ |
6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ | 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ |
7 | 7 |
8 #include <windows.h> | 8 #include <windows.h> |
9 #include <stddef.h> | 9 #include <stddef.h> |
10 #include <stdint.h> | 10 #include <stdint.h> |
11 | 11 |
12 #include <list> | 12 #include <list> |
| 13 #include <memory> |
13 #include <vector> | 14 #include <vector> |
14 | 15 |
15 #include "base/compiler_specific.h" | 16 #include "base/compiler_specific.h" |
16 #include "base/macros.h" | 17 #include "base/macros.h" |
17 #include "base/memory/scoped_ptr.h" | |
18 #include "base/process/launch.h" | 18 #include "base/process/launch.h" |
19 #include "base/strings/string16.h" | 19 #include "base/strings/string16.h" |
20 #include "base/win/scoped_handle.h" | 20 #include "base/win/scoped_handle.h" |
21 #include "sandbox/win/src/crosscall_server.h" | 21 #include "sandbox/win/src/crosscall_server.h" |
22 #include "sandbox/win/src/handle_closer.h" | 22 #include "sandbox/win/src/handle_closer.h" |
23 #include "sandbox/win/src/ipc_tags.h" | 23 #include "sandbox/win/src/ipc_tags.h" |
24 #include "sandbox/win/src/policy_engine_opcodes.h" | 24 #include "sandbox/win/src/policy_engine_opcodes.h" |
25 #include "sandbox/win/src/policy_engine_params.h" | 25 #include "sandbox/win/src/policy_engine_params.h" |
26 #include "sandbox/win/src/sandbox_policy.h" | 26 #include "sandbox/win/src/sandbox_policy.h" |
27 #include "sandbox/win/src/win_utils.h" | 27 #include "sandbox/win/src/win_utils.h" |
(...skipping 120 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
148 LowLevelPolicy* policy_maker_; | 148 LowLevelPolicy* policy_maker_; |
149 // Memory structure that stores the low level policy. | 149 // Memory structure that stores the low level policy. |
150 PolicyGlobal* policy_; | 150 PolicyGlobal* policy_; |
151 // The list of dlls to unload in the target process. | 151 // The list of dlls to unload in the target process. |
152 std::vector<base::string16> blacklisted_dlls_; | 152 std::vector<base::string16> blacklisted_dlls_; |
153 // This is a map of handle-types to names that we need to close in the | 153 // This is a map of handle-types to names that we need to close in the |
154 // target process. A null set means we need to close all handles of the | 154 // target process. A null set means we need to close all handles of the |
155 // given type. | 155 // given type. |
156 HandleCloser handle_closer_; | 156 HandleCloser handle_closer_; |
157 std::vector<base::string16> capabilities_; | 157 std::vector<base::string16> capabilities_; |
158 scoped_ptr<AppContainerAttributes> appcontainer_list_; | 158 std::unique_ptr<AppContainerAttributes> appcontainer_list_; |
159 PSID lowbox_sid_; | 159 PSID lowbox_sid_; |
160 base::win::ScopedHandle lowbox_directory_; | 160 base::win::ScopedHandle lowbox_directory_; |
161 scoped_ptr<Dispatcher> dispatcher_; | 161 std::unique_ptr<Dispatcher> dispatcher_; |
162 bool lockdown_default_dacl_; | 162 bool lockdown_default_dacl_; |
163 | 163 |
164 static HDESK alternate_desktop_handle_; | 164 static HDESK alternate_desktop_handle_; |
165 static HWINSTA alternate_winstation_handle_; | 165 static HWINSTA alternate_winstation_handle_; |
166 static IntegrityLevel alternate_desktop_integrity_level_label_; | 166 static IntegrityLevel alternate_desktop_integrity_level_label_; |
167 | 167 |
168 // Contains the list of handles being shared with the target process. | 168 // Contains the list of handles being shared with the target process. |
169 // This list contains handles other than the stderr/stdout handles which are | 169 // This list contains handles other than the stderr/stdout handles which are |
170 // shared with the target at times. | 170 // shared with the target at times. |
171 base::HandlesToInheritVector handles_to_share_; | 171 base::HandlesToInheritVector handles_to_share_; |
172 | 172 |
173 DISALLOW_COPY_AND_ASSIGN(PolicyBase); | 173 DISALLOW_COPY_AND_ASSIGN(PolicyBase); |
174 }; | 174 }; |
175 | 175 |
176 } // namespace sandbox | 176 } // namespace sandbox |
177 | 177 |
178 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ | 178 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ |
OLD | NEW |