| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ | 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ |
| 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ | 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ |
| 7 | 7 |
| 8 #include <windows.h> | 8 #include <windows.h> |
| 9 #include <stddef.h> | 9 #include <stddef.h> |
| 10 #include <stdint.h> | 10 #include <stdint.h> |
| (...skipping 54 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 65 ResultCode SetStdoutHandle(HANDLE handle) override; | 65 ResultCode SetStdoutHandle(HANDLE handle) override; |
| 66 ResultCode SetStderrHandle(HANDLE handle) override; | 66 ResultCode SetStderrHandle(HANDLE handle) override; |
| 67 ResultCode AddRule(SubSystem subsystem, | 67 ResultCode AddRule(SubSystem subsystem, |
| 68 Semantics semantics, | 68 Semantics semantics, |
| 69 const wchar_t* pattern) override; | 69 const wchar_t* pattern) override; |
| 70 ResultCode AddDllToUnload(const wchar_t* dll_name) override; | 70 ResultCode AddDllToUnload(const wchar_t* dll_name) override; |
| 71 ResultCode AddKernelObjectToClose(const base::char16* handle_type, | 71 ResultCode AddKernelObjectToClose(const base::char16* handle_type, |
| 72 const base::char16* handle_name) override; | 72 const base::char16* handle_name) override; |
| 73 void AddHandleToShare(HANDLE handle) override; | 73 void AddHandleToShare(HANDLE handle) override; |
| 74 void SetLockdownDefaultDacl() override; | 74 void SetLockdownDefaultDacl() override; |
| 75 void SetEnableOPMRedirection() override; |
| 76 bool GetEnableOPMRedirection() override; |
| 75 | 77 |
| 76 // Creates a Job object with the level specified in a previous call to | 78 // Creates a Job object with the level specified in a previous call to |
| 77 // SetJobLevel(). | 79 // SetJobLevel(). |
| 78 ResultCode MakeJobObject(base::win::ScopedHandle* job); | 80 ResultCode MakeJobObject(base::win::ScopedHandle* job); |
| 79 | 81 |
| 80 // Creates the two tokens with the levels specified in a previous call to | 82 // Creates the two tokens with the levels specified in a previous call to |
| 81 // SetTokenLevel(). Also creates a lowbox token if specified based on the | 83 // SetTokenLevel(). Also creates a lowbox token if specified based on the |
| 82 // lowbox SID. | 84 // lowbox SID. |
| 83 ResultCode MakeTokens(base::win::ScopedHandle* initial, | 85 ResultCode MakeTokens(base::win::ScopedHandle* initial, |
| 84 base::win::ScopedHandle* lockdown, | 86 base::win::ScopedHandle* lockdown, |
| (...skipping 77 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 162 bool lockdown_default_dacl_; | 164 bool lockdown_default_dacl_; |
| 163 | 165 |
| 164 static HDESK alternate_desktop_handle_; | 166 static HDESK alternate_desktop_handle_; |
| 165 static HWINSTA alternate_winstation_handle_; | 167 static HWINSTA alternate_winstation_handle_; |
| 166 static IntegrityLevel alternate_desktop_integrity_level_label_; | 168 static IntegrityLevel alternate_desktop_integrity_level_label_; |
| 167 | 169 |
| 168 // Contains the list of handles being shared with the target process. | 170 // Contains the list of handles being shared with the target process. |
| 169 // This list contains handles other than the stderr/stdout handles which are | 171 // This list contains handles other than the stderr/stdout handles which are |
| 170 // shared with the target at times. | 172 // shared with the target at times. |
| 171 base::HandlesToInheritVector handles_to_share_; | 173 base::HandlesToInheritVector handles_to_share_; |
| 174 bool enable_opm_redirection_; |
| 172 | 175 |
| 173 DISALLOW_COPY_AND_ASSIGN(PolicyBase); | 176 DISALLOW_COPY_AND_ASSIGN(PolicyBase); |
| 174 }; | 177 }; |
| 175 | 178 |
| 176 } // namespace sandbox | 179 } // namespace sandbox |
| 177 | 180 |
| 178 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ | 181 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ |
| OLD | NEW |