Check within target process for policy match on registry intercepts

sandbox/win/src/sandbox_nt_util.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_SRC_SANDBOX_NT_UTIL_H_
 #define SANDBOX_SRC_SANDBOX_NT_UTIL_H_
 
 #include <intrin.h>
 
 #include "base/basictypes.h"
@@ skipping 85 matching lines @@
 // write)
 bool ValidParameter(void* buffer, size_t size, RequiredAccess intent);
 
 // Copies data from a user buffer to our buffer. Returns the operation status.
 NTSTATUS CopyData(void* destination, const void* source, size_t bytes);
 
 // Copies the name from an object attributes.
 NTSTATUS AllocAndCopyName(const OBJECT_ATTRIBUTES* in_object,
                           wchar_t** out_name, uint32* attributes, HANDLE* root);
 
+// Determine full path name from object root and path.
+NTSTATUS AllocAndGetFullPath(HANDLE root,
+                             wchar_t* path,
+                             wchar_t** full_path);
+
 // Initializes our ntdll level heap
 bool InitHeap();
 
 // Returns true if the provided handle refers to the current process.
 bool IsSameProcess(HANDLE process);
 
 enum MappedModuleFlags {
   MODULE_IS_PE_IMAGE     = 1,   // Module is an executable.
   MODULE_HAS_ENTRY_POINT = 2,   // Execution entry point found.
   MODULE_HAS_CODE =        4    // Non zero size of executable sections.
@@ skipping 61 matching lines @@
 
 // Returns true if the file_rename_information structure is supported by our
 // rename handler.
 bool IsSupportedRenameCall(FILE_RENAME_INFORMATION* file_info, DWORD length,
                            uint32 file_info_class);
 
 }  // namespace sandbox
 
 
 #endif  // SANDBOX_SRC_SANDBOX_NT_UTIL_H__