| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef SANDBOX_SRC_SYNC_POLICY_H__ | |
| 6 #define SANDBOX_SRC_SYNC_POLICY_H__ | |
| 7 | |
| 8 #include <stdint.h> | |
| 9 | |
| 10 #include <string> | |
| 11 | |
| 12 #include "base/strings/string16.h" | |
| 13 #include "sandbox/win/src/crosscall_server.h" | |
| 14 #include "sandbox/win/src/nt_internals.h" | |
| 15 #include "sandbox/win/src/policy_low_level.h" | |
| 16 #include "sandbox/win/src/sandbox_policy.h" | |
| 17 | |
| 18 namespace sandbox { | |
| 19 | |
| 20 enum EvalResult; | |
| 21 | |
| 22 // This class centralizes most of the knowledge related to sync policy | |
| 23 class SyncPolicy { | |
| 24 public: | |
| 25 // Creates the required low-level policy rules to evaluate a high-level | |
| 26 // policy rule for sync calls, in particular open or create actions. | |
| 27 // name is the sync object name, semantics is the desired semantics for the | |
| 28 // open or create and policy is the policy generator to which the rules are | |
| 29 // going to be added. | |
| 30 static bool GenerateRules(const wchar_t* name, | |
| 31 TargetPolicy::Semantics semantics, | |
| 32 LowLevelPolicy* policy); | |
| 33 | |
| 34 // Performs the desired policy action on a request. | |
| 35 // client_info is the target process that is making the request and | |
| 36 // eval_result is the desired policy action to accomplish. | |
| 37 static NTSTATUS CreateEventAction(EvalResult eval_result, | |
| 38 const ClientInfo& client_info, | |
| 39 const base::string16& event_name, | |
| 40 uint32_t event_type, | |
| 41 uint32_t initial_state, | |
| 42 HANDLE* handle); | |
| 43 static NTSTATUS OpenEventAction(EvalResult eval_result, | |
| 44 const ClientInfo& client_info, | |
| 45 const base::string16& event_name, | |
| 46 uint32_t desired_access, | |
| 47 HANDLE* handle); | |
| 48 }; | |
| 49 | |
| 50 } // namespace sandbox | |
| 51 | |
| 52 #endif // SANDBOX_SRC_SYNC_POLICY_H__ | |
| OLD | NEW |