Adding method to create process using LowBox token in sandbox code.

sandbox/win/src/nt_internals.h

Index: sandbox/win/src/nt_internals.h
diff --git a/sandbox/win/src/nt_internals.h b/sandbox/win/src/nt_internals.h
index 8b22e0e9a3d0ee5af4472102ef86435f3250a897..beb5684121b4854c85153db930e0d2ce29c694ae 100644
--- a/sandbox/win/src/nt_internals.h
+++ b/sandbox/win/src/nt_internals.h
@@ -656,5 +656,36 @@ typedef NTSTATUS (WINAPI* NtOpenSymbolicLinkObjectFunction) (
 #define DIRECTORY_CREATE_SUBDIRECTORY 0x0008
 #define DIRECTORY_ALL_ACCESS          0x000F
 
+typedef NTSTATUS (WINAPI* NtCreateLowBoxToken)(
+    OUT PHANDLE token,
+    IN HANDLE original_handle,
+    IN ACCESS_MASK access,
+    IN POBJECT_ATTRIBUTES object_attribute,
+    IN PSID appcontainer_sid,
+    IN DWORD capabilityCount,
+    IN PSID_AND_ATTRIBUTES capabilities,
+    IN DWORD handle_count,
+    IN PHANDLE handles);
+
+typedef NTSTATUS(WINAPI *NtSetInformationProcess)(
+    IN HANDLE process_handle,
+    IN ULONG info_class,
+    IN PVOID process_information,
+    IN ULONG information_length);
+
+typedef NTSTATUS(WINAPI *NtQueryInformationProcess)(

[rvargas (doing something else), 2015/02/21 01:01:22]

I don't see this being used

[Shrikant Kelkar, 2015/02/21 02:32:40]

removed

+    IN  HANDLE process_handle,
+    IN  ULONG  info_class,
+    OUT PVOID  process_information,
+    IN  ULONG  information_length,
+    OUT PULONG return_length);
+
+struct PROCESS_ACCESS_TOKEN {
+  HANDLE token;
+  HANDLE thread;
+};
+
+const unsigned int NtProcessInformationAccessToken = 9;
+
 #endif  // SANDBOX_WIN_SRC_NT_INTERNALS_H__