Add UIPI support for sandbox alternate desktop

sandbox/win/tests/validation_tests/suite.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file contains the validation tests for the sandbox.
 // It includes the tests that need to be performed inside the
 // sandbox.
 
 #include <shlwapi.h>
 
@@ skipping 94 matching lines @@
       runner.RunTest(
           L"OpenKey HKLM "
           L"\"Software\\Microsoft\\Windows NT\\CurrentVersion\\WinLogon\""));
 }
 
 // Tests that the permissions on the Windowstation does not allow the sandbox
 // to get to the interactive desktop or to make the sbox desktop interactive.
 TEST(ValidationSuite, TestDesktop) {
   TestRunner runner;
   runner.GetPolicy()->SetAlternateDesktop(true);
+  runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW);
   EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"OpenInteractiveDesktop NULL"));
   EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"SwitchToSboxDesktop NULL"));
 }
 
 // Tests that the permissions on the Windowstation does not allow the sandbox
 // to get to the interactive desktop or to make the sbox desktop interactive.
 TEST(ValidationSuite, TestAlternateDesktop) {
   base::win::Version version = base::win::GetVersion();
   if (version < base::win::VERSION_WIN7)
     return;
 
   TestRunner runner;
   EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(L"EnumAlternateWinsta NULL"));
 
   wchar_t command[1024] = {0};
   runner.SetTimeout(3600000);
   runner.GetPolicy()->SetAlternateDesktop(true);
-  runner.GetPolicy()->SetDelayedIntegrityLevel(INTEGRITY_LEVEL_UNTRUSTED);
+  runner.GetPolicy()->SetIntegrityLevel(INTEGRITY_LEVEL_LOW);
   base::string16 desktop_name = runner.GetPolicy()->GetAlternateDesktop();
   desktop_name = desktop_name.substr(desktop_name.find('\\') + 1);
   wsprintf(command, L"OpenAlternateDesktop %lS", desktop_name.c_str());
   EXPECT_EQ(SBOX_TEST_DENIED, runner.RunTest(command));
 }
 
 // Tests if the windows are correctly protected by the sandbox.
 TEST(ValidationSuite, TestWindows) {
   TestRunner runner;
   wchar_t command[1024] = {0};
@@ skipping 89 matching lines @@
 TEST(ValidationSuite, TestMemoryNoLimit) {
   TestRunner runner;
   wchar_t command[1024] = {0};
   const int kAllocationSize = 256 * 1024 * 1024;
 
   wsprintf(command, L"AllocateCmd %d", kAllocationSize);
   EXPECT_EQ(SBOX_TEST_SUCCEEDED, runner.RunTest(command));
 }
 
 }  // namespace sandbox