Enable win32k lockdown for ppapi processes.

content/common/sandbox_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_win.h"
 
 #include <stddef.h>
 
 #include <string>
 
@@ skipping 583 matching lines @@
 sandbox::ResultCode AddAppContainerPolicy(sandbox::TargetPolicy* policy,
                                           const wchar_t* sid) {
   if (IsAppContainerEnabled())
     return policy->SetLowBox(sid);
   return sandbox::SBOX_ALL_OK;
 }
 
 sandbox::ResultCode AddWin32kLockdownPolicy(sandbox::TargetPolicy* policy,
                                             bool enable_opm) {
 #if !defined(NACL_WIN64)
-  if (!IsWin32kRendererLockdownEnabled())
+  if (!IsWin32kLockdownEnabled())
     return sandbox::SBOX_ALL_OK;
 
   // Enable win32k lockdown if not already.
   sandbox::MitigationFlags flags = policy->GetProcessMitigations();
   if ((flags & sandbox::MITIGATION_WIN32K_DISABLE) ==
       sandbox::MITIGATION_WIN32K_DISABLE)
     return sandbox::SBOX_ALL_OK;
 
   sandbox::ResultCode result =
       policy->AddRule(sandbox::TargetPolicy::SUBSYS_WIN32K_LOCKDOWN,
@@ skipping 114 matching lines @@
   if (base::FeatureList::IsEnabled(features::kWinSboxDisableExtensionPoints))
     mitigations |= sandbox::MITIGATION_EXTENSION_POINT_DISABLE;
 
   sandbox::ResultCode result = sandbox::SBOX_ERROR_GENERIC;
   result = policy->SetProcessMitigations(mitigations);
 
   if (result != sandbox::SBOX_ALL_OK)
     return result;
 
 #if !defined(NACL_WIN64)
-  if (type_str == switches::kRendererProcess &&
-      IsWin32kRendererLockdownEnabled()) {
+  if (type_str == switches::kRendererProcess && IsWin32kLockdownEnabled()) {
     result = AddWin32kLockdownPolicy(policy.get(), false);
     if (result != sandbox::SBOX_ALL_OK)
       return result;
   }
 #endif
 
   // Post-startup mitigations.
   mitigations = sandbox::MITIGATION_STRICT_HANDLE_CHECKS |
                 sandbox::MITIGATION_DLL_SEARCH_ORDER;
 
@@ skipping 83 matching lines @@
   }
 
   delegate->PostSpawnTarget(target.process_handle());
 
   CHECK(ResumeThread(target.thread_handle()) != static_cast<DWORD>(-1));
   *process = base::Process(target.TakeProcessHandle());
   return sandbox::SBOX_ALL_OK;
 }
 
 }  // namespace content