| OLD | NEW |
| 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef SANDBOX_SRC_SECURITY_LEVEL_H_ | 5 #ifndef SANDBOX_SRC_SECURITY_LEVEL_H_ |
| 6 #define SANDBOX_SRC_SECURITY_LEVEL_H_ | 6 #define SANDBOX_SRC_SECURITY_LEVEL_H_ |
| 7 | 7 |
| 8 #include "base/basictypes.h" | 8 #include "base/basictypes.h" |
| 9 | 9 |
| 10 namespace sandbox { | 10 namespace sandbox { |
| (...skipping 58 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 69 // levels to run sandboxed code specially if there is a chance that the | 69 // levels to run sandboxed code specially if there is a chance that the |
| 70 // broker is process might be started by a user that belongs to the Admins | 70 // broker is process might be started by a user that belongs to the Admins |
| 71 // or power users groups. | 71 // or power users groups. |
| 72 enum TokenLevel { | 72 enum TokenLevel { |
| 73 USER_LOCKDOWN = 0, | 73 USER_LOCKDOWN = 0, |
| 74 USER_RESTRICTED, | 74 USER_RESTRICTED, |
| 75 USER_LIMITED, | 75 USER_LIMITED, |
| 76 USER_INTERACTIVE, | 76 USER_INTERACTIVE, |
| 77 USER_NON_ADMIN, | 77 USER_NON_ADMIN, |
| 78 USER_RESTRICTED_SAME_ACCESS, | 78 USER_RESTRICTED_SAME_ACCESS, |
| 79 USER_UNPROTECTED | 79 USER_UNPROTECTED, |
| 80 USER_LAST |
| 80 }; | 81 }; |
| 81 | 82 |
| 82 // The Job level specifies a set of decreasing security profiles for the | 83 // The Job level specifies a set of decreasing security profiles for the |
| 83 // Job object that the target process will be placed into. | 84 // Job object that the target process will be placed into. |
| 84 // This table summarizes the security associated with each level: | 85 // This table summarizes the security associated with each level: |
| 85 // | 86 // |
| 86 // JobLevel |General |Quota | | 87 // JobLevel |General |Quota | |
| 87 // |restrictions |restrictions | | 88 // |restrictions |restrictions | |
| 88 // -----------------|---------------------------------- |--------------------| | 89 // -----------------|---------------------------------- |--------------------| |
| 89 // JOB_NONE | No job is assigned to the | None | | 90 // JOB_NONE | No job is assigned to the | None | |
| (...skipping 104 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 194 | 195 |
| 195 // Sets the DLL search order to LOAD_LIBRARY_SEARCH_DEFAULT_DIRS. Additional | 196 // Sets the DLL search order to LOAD_LIBRARY_SEARCH_DEFAULT_DIRS. Additional |
| 196 // directories can be added via the Windows AddDllDirectory() function. | 197 // directories can be added via the Windows AddDllDirectory() function. |
| 197 // http://msdn.microsoft.com/en-us/library/windows/desktop/hh310515 | 198 // http://msdn.microsoft.com/en-us/library/windows/desktop/hh310515 |
| 198 // Must be enabled after startup. | 199 // Must be enabled after startup. |
| 199 const MitigationFlags MITIGATION_DLL_SEARCH_ORDER = 0x00000001ULL << 32; | 200 const MitigationFlags MITIGATION_DLL_SEARCH_ORDER = 0x00000001ULL << 32; |
| 200 | 201 |
| 201 } // namespace sandbox | 202 } // namespace sandbox |
| 202 | 203 |
| 203 #endif // SANDBOX_SRC_SECURITY_LEVEL_H_ | 204 #endif // SANDBOX_SRC_SECURITY_LEVEL_H_ |
| OLD | NEW |