OLD | NEW |
1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_SRC_SECURITY_LEVEL_H_ | 5 #ifndef SANDBOX_SRC_SECURITY_LEVEL_H_ |
6 #define SANDBOX_SRC_SECURITY_LEVEL_H_ | 6 #define SANDBOX_SRC_SECURITY_LEVEL_H_ |
7 | 7 |
8 #include "base/basictypes.h" | 8 #include "base/basictypes.h" |
9 | 9 |
10 namespace sandbox { | 10 namespace sandbox { |
(...skipping 58 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
69 // levels to run sandboxed code specially if there is a chance that the | 69 // levels to run sandboxed code specially if there is a chance that the |
70 // broker is process might be started by a user that belongs to the Admins | 70 // broker is process might be started by a user that belongs to the Admins |
71 // or power users groups. | 71 // or power users groups. |
72 enum TokenLevel { | 72 enum TokenLevel { |
73 USER_LOCKDOWN = 0, | 73 USER_LOCKDOWN = 0, |
74 USER_RESTRICTED, | 74 USER_RESTRICTED, |
75 USER_LIMITED, | 75 USER_LIMITED, |
76 USER_INTERACTIVE, | 76 USER_INTERACTIVE, |
77 USER_NON_ADMIN, | 77 USER_NON_ADMIN, |
78 USER_RESTRICTED_SAME_ACCESS, | 78 USER_RESTRICTED_SAME_ACCESS, |
79 USER_UNPROTECTED | 79 USER_UNPROTECTED, |
| 80 USER_LAST |
80 }; | 81 }; |
81 | 82 |
82 // The Job level specifies a set of decreasing security profiles for the | 83 // The Job level specifies a set of decreasing security profiles for the |
83 // Job object that the target process will be placed into. | 84 // Job object that the target process will be placed into. |
84 // This table summarizes the security associated with each level: | 85 // This table summarizes the security associated with each level: |
85 // | 86 // |
86 // JobLevel |General |Quota | | 87 // JobLevel |General |Quota | |
87 // |restrictions |restrictions | | 88 // |restrictions |restrictions | |
88 // -----------------|---------------------------------- |--------------------| | 89 // -----------------|---------------------------------- |--------------------| |
89 // JOB_NONE | No job is assigned to the | None | | 90 // JOB_NONE | No job is assigned to the | None | |
(...skipping 104 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
194 | 195 |
195 // Sets the DLL search order to LOAD_LIBRARY_SEARCH_DEFAULT_DIRS. Additional | 196 // Sets the DLL search order to LOAD_LIBRARY_SEARCH_DEFAULT_DIRS. Additional |
196 // directories can be added via the Windows AddDllDirectory() function. | 197 // directories can be added via the Windows AddDllDirectory() function. |
197 // http://msdn.microsoft.com/en-us/library/windows/desktop/hh310515 | 198 // http://msdn.microsoft.com/en-us/library/windows/desktop/hh310515 |
198 // Must be enabled after startup. | 199 // Must be enabled after startup. |
199 const MitigationFlags MITIGATION_DLL_SEARCH_ORDER = 0x00000001ULL << 32; | 200 const MitigationFlags MITIGATION_DLL_SEARCH_ORDER = 0x00000001ULL << 32; |
200 | 201 |
201 } // namespace sandbox | 202 } // namespace sandbox |
202 | 203 |
203 #endif // SANDBOX_SRC_SECURITY_LEVEL_H_ | 204 #endif // SANDBOX_SRC_SECURITY_LEVEL_H_ |
OLD | NEW |