Launches a privileged utility process.

content/browser/utility_process_host_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/utility_process_host_impl.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/command_line.h"
 #include "base/lazy_instance.h"
@@ skipping 55 matching lines @@
 }
 
 UtilityProcessHostImpl::UtilityProcessHostImpl(
     UtilityProcessHostClient* client,
     base::SequencedTaskRunner* client_task_runner)
     : client_(client),
       client_task_runner_(client_task_runner),
       is_batch_mode_(false),
       is_mdns_enabled_(false),
       no_sandbox_(false),
+#if defined(OS_WIN)
+      run_elevated_(false),
+#endif
 #if defined(OS_LINUX)
       child_flags_(ChildProcessHost::CHILD_ALLOW_SELF),
 #else
       child_flags_(ChildProcessHost::CHILD_NORMAL),
 #endif
       started_(false) {
 }
 
 UtilityProcessHostImpl::~UtilityProcessHostImpl() {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
@@ skipping 26 matching lines @@
 }
 
 void UtilityProcessHostImpl::EnableMDns() {
   is_mdns_enabled_ = true;
 }
 
 void UtilityProcessHostImpl::DisableSandbox() {
   no_sandbox_ = true;
 }
 
+#if defined(OS_WIN)
+void UtilityProcessHostImpl::ElevatePrivileges() {
+  no_sandbox_ = true;
+  run_elevated_ = true;
+}
+#endif
+
 const ChildProcessData& UtilityProcessHostImpl::GetData() {
   return process_->GetData();
 }
 
 #if defined(OS_POSIX)
 
 void UtilityProcessHostImpl::SetEnv(const base::EnvironmentMap& env) {
   env_ = env;
 }
 
@@ skipping 71 matching lines @@
 
     if (!exposed_dir_.empty()) {
       cmd_line->AppendSwitchPath(switches::kUtilityProcessAllowedDir,
                                  exposed_dir_);
     }
 #endif
 
     if (is_mdns_enabled_)
       cmd_line->AppendSwitch(switches::kUtilityProcessEnableMDns);
 
+#if defined(OS_WIN)
+    // Let the utility process know if it is intended to be elevated.
+    if (run_elevated_)
+      cmd_line->AppendSwitch(switches::kUtilityProcessRunningElevated);
+#endif
+
     bool use_zygote = false;
 
 #if defined(OS_LINUX)
     // The Linux sandbox does not support granting access to a single directory,
     // so we need to bypass the zygote in that case.
     use_zygote = !no_sandbox_ && exposed_dir_.empty();
 #endif
 
     process_->Launch(
 #if defined(OS_WIN)
         new UtilitySandboxedProcessLauncherDelegate(exposed_dir_),
+        run_elevated_,
 #elif defined(OS_POSIX)
         use_zygote,
         env_,
 #endif
         cmd_line);
   }
 
   return true;
 }
 
 bool UtilityProcessHostImpl::OnMessageReceived(const IPC::Message& message) {
   client_task_runner_->PostTask(
       FROM_HERE,
       base::Bind(base::IgnoreResult(
           &UtilityProcessHostClient::OnMessageReceived), client_.get(),
           message));
   return true;
 }
 
+void UtilityProcessHostImpl::OnProcessLaunchFailed() {
+  client_task_runner_->PostTask(
+      FROM_HERE,
+      base::Bind(&UtilityProcessHostClient::OnProcessLaunchFailed,
+                 client_.get()));
+}
+
 void UtilityProcessHostImpl::OnProcessCrashed(int exit_code) {
   client_task_runner_->PostTask(
       FROM_HERE,
       base::Bind(&UtilityProcessHostClient::OnProcessCrashed, client_.get(),
             exit_code));
 }
 
 }  // namespace content