Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(715)

Side by Side Diff: sandbox/win/src/job.h

Issue 1851213002: Remove sandbox on Windows. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: fix nacl compile issues Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « sandbox/win/src/ipc_unittest.cc ('k') | sandbox/win/src/job.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #ifndef SANDBOX_SRC_JOB_H_
6 #define SANDBOX_SRC_JOB_H_
7
8 #include <stddef.h>
9
10 #include "base/macros.h"
11 #include "base/win/scoped_handle.h"
12 #include "sandbox/win/src/restricted_token_utils.h"
13
14 namespace sandbox {
15
16 // Handles the creation of job objects based on a security profile.
17 // Sample usage:
18 // Job job;
19 // job.Init(JOB_LOCKDOWN, NULL); //no job name
20 // job.AssignProcessToJob(process_handle);
21 class Job {
22 public:
23 Job();
24
25 ~Job();
26
27 // Initializes and creates the job object. The security of the job is based
28 // on the security_level parameter.
29 // job_name can be NULL if the job is unnamed.
30 // If the chosen profile has too many ui restrictions, you can disable some
31 // by specifying them in the ui_exceptions parameters.
32 // If the function succeeds, the return value is ERROR_SUCCESS. If the
33 // function fails, the return value is the win32 error code corresponding to
34 // the error.
35 DWORD Init(JobLevel security_level,
36 const wchar_t* job_name,
37 DWORD ui_exceptions,
38 size_t memory_limit);
39
40 // Assigns the process referenced by process_handle to the job.
41 // If the function succeeds, the return value is ERROR_SUCCESS. If the
42 // function fails, the return value is the win32 error code corresponding to
43 // the error.
44 DWORD AssignProcessToJob(HANDLE process_handle);
45
46 // Grants access to "handle" to the job. All processes in the job can
47 // subsequently recognize and use the handle.
48 // If the function succeeds, the return value is ERROR_SUCCESS. If the
49 // function fails, the return value is the win32 error code corresponding to
50 // the error.
51 DWORD UserHandleGrantAccess(HANDLE handle);
52
53 // Revokes ownership to the job handle and returns it.
54 // If the object is not yet initialized, it returns an invalid handle.
55 base::win::ScopedHandle Take();
56
57 private:
58 // Handle to the job referenced by the object.
59 base::win::ScopedHandle job_handle_;
60
61 DISALLOW_COPY_AND_ASSIGN(Job);
62 };
63
64 } // namespace sandbox
65
66
67 #endif // SANDBOX_SRC_JOB_H_
OLDNEW
« no previous file with comments | « sandbox/win/src/ipc_unittest.cc ('k') | sandbox/win/src/job.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698