Implement sandbox hooks to forward OPM related GDI system calls.

sandbox/win/src/process_mitigations_win32k_policy.h

Index: sandbox/win/src/process_mitigations_win32k_policy.h
diff --git a/sandbox/win/src/process_mitigations_win32k_policy.h b/sandbox/win/src/process_mitigations_win32k_policy.h
index 32af16864505bf9fd2526ed073a4f4d9643b250a..5e12993a172b7456045b048a8ff5cce4d32d0164 100644
--- a/sandbox/win/src/process_mitigations_win32k_policy.h
+++ b/sandbox/win/src/process_mitigations_win32k_policy.h
@@ -5,6 +5,7 @@
 #ifndef SANDBOX_SRC_PROCESS_MITIGATIONS_WIN32K_POLICY_H_
 #define SANDBOX_SRC_PROCESS_MITIGATIONS_WIN32K_POLICY_H_
 
+#include "base/strings/string16.h"
 #include "sandbox/win/src/crosscall_server.h"
 #include "sandbox/win/src/policy_low_level.h"
 #include "sandbox/win/src/sandbox_policy.h"
@@ -25,6 +26,46 @@ class ProcessMitigationsWin32KLockdownPolicy {
   static bool GenerateRules(const wchar_t* name,
                             TargetPolicy::Semantics semantics,
                             LowLevelPolicy* policy);
+
+  static uint32_t EnumDisplayMonitorsAction(const ClientInfo& client_info,
+                                            HMONITOR* monitor_list,
+                                            uint32_t monitor_list_size);
+
+  static NTSTATUS GetSuggestedOPMProtectedOutputArraySizeAction(
+      const ClientInfo& client_info,
+      const base::string16& device_name,
+      uint32_t* suggested_array_size);
+
+  static NTSTATUS CreateOPMProtectedOutputsAction(
+      const ClientInfo& client_info,
+      const base::string16& device_name,
+      HANDLE* protected_outputs,
+      uint32_t array_input_size,
+      uint32_t* array_output_size);
+
+  static NTSTATUS GetCertificateSizeAction(const ClientInfo& client_info,
+                                           const base::string16& device_name,
+                                           uint32_t* cert_size);
+  static NTSTATUS GetCertificateAction(const ClientInfo& client_info,
+                                       const base::string16& device_name,
+                                       BYTE* cert_data,
+                                       uint32_t cert_size);
+  static NTSTATUS GetOPMRandomNumberAction(const ClientInfo& client_info,
+                                           HANDLE protected_output,
+                                           void* random_number);
+  static NTSTATUS SetOPMSigningKeyAndSequenceNumbersAction(
+      const ClientInfo& client_info,
+      HANDLE protected_output,
+      void* parameters);
+  static NTSTATUS ConfigureOPMProtectedOutputAction(
+      const ClientInfo& client_info,
+      HANDLE protected_output,
+      void* parameters);
+  static NTSTATUS GetOPMInformationAction(const ClientInfo& client_info,
+                                          HANDLE protected_output,
+                                          void* parameters,
+                                          void* requested_information);
+  static NTSTATUS DestroyOPMProtectedOutputAction(HANDLE protected_output);
 };
 
 }  // namespace sandbox