Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(13)

Side by Side Diff: sandbox/win/src/sandbox_policy_base.h

Issue 1856993003: Implement sandbox hooks to forward OPM related GDI system calls. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Removed header Created 4 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « sandbox/win/src/sandbox_policy.h ('k') | sandbox/win/src/sandbox_policy_base.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ 5 #ifndef SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_
6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ 6 #define SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_
7 7
8 #include <windows.h> 8 #include <windows.h>
9 #include <stddef.h> 9 #include <stddef.h>
10 #include <stdint.h> 10 #include <stdint.h>
(...skipping 52 matching lines...) Expand 10 before | Expand all | Expand 10 after
63 ResultCode SetStdoutHandle(HANDLE handle) override; 63 ResultCode SetStdoutHandle(HANDLE handle) override;
64 ResultCode SetStderrHandle(HANDLE handle) override; 64 ResultCode SetStderrHandle(HANDLE handle) override;
65 ResultCode AddRule(SubSystem subsystem, 65 ResultCode AddRule(SubSystem subsystem,
66 Semantics semantics, 66 Semantics semantics,
67 const wchar_t* pattern) override; 67 const wchar_t* pattern) override;
68 ResultCode AddDllToUnload(const wchar_t* dll_name) override; 68 ResultCode AddDllToUnload(const wchar_t* dll_name) override;
69 ResultCode AddKernelObjectToClose(const base::char16* handle_type, 69 ResultCode AddKernelObjectToClose(const base::char16* handle_type,
70 const base::char16* handle_name) override; 70 const base::char16* handle_name) override;
71 void AddHandleToShare(HANDLE handle) override; 71 void AddHandleToShare(HANDLE handle) override;
72 void SetLockdownDefaultDacl() override; 72 void SetLockdownDefaultDacl() override;
73 void SetEnableOPMRedirection() override;
74 bool GetEnableOPMRedirection() override;
73 75
74 // Creates a Job object with the level specified in a previous call to 76 // Creates a Job object with the level specified in a previous call to
75 // SetJobLevel(). 77 // SetJobLevel().
76 ResultCode MakeJobObject(base::win::ScopedHandle* job); 78 ResultCode MakeJobObject(base::win::ScopedHandle* job);
77 79
78 // Creates the two tokens with the levels specified in a previous call to 80 // Creates the two tokens with the levels specified in a previous call to
79 // SetTokenLevel(). Also creates a lowbox token if specified based on the 81 // SetTokenLevel(). Also creates a lowbox token if specified based on the
80 // lowbox SID. 82 // lowbox SID.
81 ResultCode MakeTokens(base::win::ScopedHandle* initial, 83 ResultCode MakeTokens(base::win::ScopedHandle* initial,
82 base::win::ScopedHandle* lockdown, 84 base::win::ScopedHandle* lockdown,
(...skipping 74 matching lines...) Expand 10 before | Expand all | Expand 10 after
157 bool lockdown_default_dacl_; 159 bool lockdown_default_dacl_;
158 160
159 static HDESK alternate_desktop_handle_; 161 static HDESK alternate_desktop_handle_;
160 static HWINSTA alternate_winstation_handle_; 162 static HWINSTA alternate_winstation_handle_;
161 static IntegrityLevel alternate_desktop_integrity_level_label_; 163 static IntegrityLevel alternate_desktop_integrity_level_label_;
162 164
163 // Contains the list of handles being shared with the target process. 165 // Contains the list of handles being shared with the target process.
164 // This list contains handles other than the stderr/stdout handles which are 166 // This list contains handles other than the stderr/stdout handles which are
165 // shared with the target at times. 167 // shared with the target at times.
166 base::HandlesToInheritVector handles_to_share_; 168 base::HandlesToInheritVector handles_to_share_;
169 bool enable_opm_redirection_;
167 170
168 DISALLOW_COPY_AND_ASSIGN(PolicyBase); 171 DISALLOW_COPY_AND_ASSIGN(PolicyBase);
169 }; 172 };
170 173
171 } // namespace sandbox 174 } // namespace sandbox
172 175
173 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_ 176 #endif // SANDBOX_WIN_SRC_SANDBOX_POLICY_BASE_H_
OLDNEW
« no previous file with comments | « sandbox/win/src/sandbox_policy.h ('k') | sandbox/win/src/sandbox_policy_base.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698