Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(410)

Side by Side Diff: sandbox/win/src/process_mitigations.h

Issue 1851213002: Remove sandbox on Windows. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: fix nacl compile issues Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « sandbox/win/src/policy_target_test.cc ('k') | sandbox/win/src/process_mitigations.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #ifndef SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
6 #define SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
7
8 #include <windows.h>
9 #include <stddef.h>
10
11 #include "sandbox/win/src/security_level.h"
12
13 namespace sandbox {
14
15 // Sets the mitigation policy for the current process, ignoring any settings
16 // that are invalid for the current version of Windows.
17 bool ApplyProcessMitigationsToCurrentProcess(MitigationFlags flags);
18
19 // Returns the flags that must be enforced after startup for the current OS
20 // version.
21 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags);
22
23 // Converts sandbox flags to the PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES
24 // policy flags used by UpdateProcThreadAttribute(). The size field varies
25 // between a 32-bit and a 64-bit type based on the exact build and version of
26 // Windows, so the returned size must be passed to UpdateProcThreadAttribute().
27 void ConvertProcessMitigationsToPolicy(MitigationFlags flags,
28 DWORD64* policy_flags,
29 size_t* size);
30
31 // Adds mitigations that need to be performed on the suspended target process
32 // before execution begins.
33 bool ApplyProcessMitigationsToSuspendedProcess(HANDLE process,
34 MitigationFlags flags);
35
36 // Returns true if all the supplied flags can be set after a process starts.
37 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags);
38
39 // Returns true if all the supplied flags can be set before a process starts.
40 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags);
41
42 } // namespace sandbox
43
44 #endif // SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_
45
OLDNEW
« no previous file with comments | « sandbox/win/src/policy_target_test.cc ('k') | sandbox/win/src/process_mitigations.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698