| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef REMOTING_HOST_WIN_LAUNCH_PROCESS_WITH_TOKEN_H_ | 5 #ifndef REMOTING_HOST_WIN_LAUNCH_PROCESS_WITH_TOKEN_H_ |
| 6 #define REMOTING_HOST_WIN_LAUNCH_PROCESS_WITH_TOKEN_H_ | 6 #define REMOTING_HOST_WIN_LAUNCH_PROCESS_WITH_TOKEN_H_ |
| 7 | 7 |
| 8 #include <windows.h> | 8 #include <windows.h> |
| 9 #include <stdint.h> | 9 #include <stdint.h> |
| 10 | 10 |
| 11 #include <memory> | 11 #include <memory> |
| 12 #include <string> | 12 #include <string> |
| 13 | 13 |
| 14 #include "base/command_line.h" | 14 #include "base/command_line.h" |
| 15 #include "base/files/file_path.h" | 15 #include "base/files/file_path.h" |
| 16 #include "base/lazy_instance.h" | 16 #include "base/lazy_instance.h" |
| 17 #include "base/process/launch.h" | |
| 18 #include "base/synchronization/lock.h" | 17 #include "base/synchronization/lock.h" |
| 19 #include "base/win/scoped_handle.h" | 18 #include "base/win/scoped_handle.h" |
| 20 | 19 |
| 21 namespace remoting { | 20 namespace remoting { |
| 22 | 21 |
| 22 // This lock should be taken when creating handles that will be inherited by |
| 23 // a child process. Without it the child process can inherit handles created for |
| 24 // a different child process started at the same time. |
| 25 extern base::LazyInstance<base::Lock>::Leaky g_inherit_handles_lock; |
| 26 |
| 23 // Creates a copy of the current process token for the given |session_id| so | 27 // Creates a copy of the current process token for the given |session_id| so |
| 24 // it can be used to launch a process in that session. | 28 // it can be used to launch a process in that session. |
| 25 bool CreateSessionToken(uint32_t session_id, | 29 bool CreateSessionToken(uint32_t session_id, |
| 26 base::win::ScopedHandle* token_out); | 30 base::win::ScopedHandle* token_out); |
| 27 | 31 |
| 28 // Launches |binary| in the security context of the user represented by | 32 // Launches |binary| in the security context of the user represented by |
| 29 // |user_token|. The session ID specified by the token is respected as well. | 33 // |user_token|. The session ID specified by the token is respected as well. |
| 30 // If |handles_to_inherit| is non-empty, these handles will be inherited by the | 34 // The other parameters are passed directly to CreateProcessAsUser(). |
| 31 // new process. The other parameters are passed directly to | 35 // If |inherit_handles| is true |g_inherit_handles_lock| should be taken while |
| 32 // CreateProcessAsUser(). | 36 // any inheritable handles are open. |
| 33 bool LaunchProcessWithToken( | 37 bool LaunchProcessWithToken(const base::FilePath& binary, |
| 34 const base::FilePath& binary, | 38 const base::CommandLine::StringType& command_line, |
| 35 const base::CommandLine::StringType& command_line, | 39 HANDLE user_token, |
| 36 HANDLE user_token, | 40 SECURITY_ATTRIBUTES* process_attributes, |
| 37 SECURITY_ATTRIBUTES* process_attributes, | 41 SECURITY_ATTRIBUTES* thread_attributes, |
| 38 SECURITY_ATTRIBUTES* thread_attributes, | 42 bool inherit_handles, |
| 39 const base::HandlesToInheritVector& handles_to_inherit, | 43 DWORD creation_flags, |
| 40 DWORD creation_flags, | 44 const base::char16* desktop_name, |
| 41 const base::char16* desktop_name, | 45 base::win::ScopedHandle* process_out, |
| 42 base::win::ScopedHandle* process_out, | 46 base::win::ScopedHandle* thread_out); |
| 43 base::win::ScopedHandle* thread_out); | |
| 44 | 47 |
| 45 } // namespace remoting | 48 } // namespace remoting |
| 46 | 49 |
| 47 #endif // REMOTING_HOST_WIN_LAUNCH_PROCESS_WITH_TOKEN_H_ | 50 #endif // REMOTING_HOST_WIN_LAUNCH_PROCESS_WITH_TOKEN_H_ |
| OLD | NEW |