OLD | NEW |
1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef SANDBOX_SRC_SECURITY_LEVEL_H_ | 5 #ifndef SANDBOX_SRC_SECURITY_LEVEL_H_ |
6 #define SANDBOX_SRC_SECURITY_LEVEL_H_ | 6 #define SANDBOX_SRC_SECURITY_LEVEL_H_ |
7 | 7 |
8 #include "base/basictypes.h" | 8 #include "base/basictypes.h" |
9 | 9 |
10 namespace sandbox { | 10 namespace sandbox { |
(...skipping 181 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
192 // App_InitDLLs). Corresponds to | 192 // App_InitDLLs). Corresponds to |
193 // PROCESS_CREATION_MITIGATION_POLICY_EXTENSION_POINT_DISABLE_ALWAYS_ON. | 193 // PROCESS_CREATION_MITIGATION_POLICY_EXTENSION_POINT_DISABLE_ALWAYS_ON. |
194 const MitigationFlags MITIGATION_EXTENSION_DLL_DISABLE = 0x00000400; | 194 const MitigationFlags MITIGATION_EXTENSION_DLL_DISABLE = 0x00000400; |
195 | 195 |
196 // Sets the DLL search order to LOAD_LIBRARY_SEARCH_DEFAULT_DIRS. Additional | 196 // Sets the DLL search order to LOAD_LIBRARY_SEARCH_DEFAULT_DIRS. Additional |
197 // directories can be added via the Windows AddDllDirectory() function. | 197 // directories can be added via the Windows AddDllDirectory() function. |
198 // http://msdn.microsoft.com/en-us/library/windows/desktop/hh310515 | 198 // http://msdn.microsoft.com/en-us/library/windows/desktop/hh310515 |
199 // Must be enabled after startup. | 199 // Must be enabled after startup. |
200 const MitigationFlags MITIGATION_DLL_SEARCH_ORDER = 0x00000001ULL << 32; | 200 const MitigationFlags MITIGATION_DLL_SEARCH_ORDER = 0x00000001ULL << 32; |
201 | 201 |
| 202 // Changes the mandatory integrity level policy on the current process' token |
| 203 // to enable no-read and no-execute up. This prevents a lower IL process from |
| 204 // opening the process token for impersonate/duplicate/assignment. |
| 205 const MitigationFlags MITIGATION_HARDEN_TOKEN_IL_POLICY = 0x00000001ULL << 33; |
| 206 |
202 } // namespace sandbox | 207 } // namespace sandbox |
203 | 208 |
204 #endif // SANDBOX_SRC_SECURITY_LEVEL_H_ | 209 #endif // SANDBOX_SRC_SECURITY_LEVEL_H_ |
OLD | NEW |