process_mitigations_win32k_policy.h 1.1 KB

123456789101112131415161718192021222324252627282930
  1. // Copyright 2014 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #ifndef SANDBOX_WIN_SRC_PROCESS_MITIGATIONS_WIN32K_POLICY_H_
  5. #define SANDBOX_WIN_SRC_PROCESS_MITIGATIONS_WIN32K_POLICY_H_
  6. #include "sandbox/win/src/crosscall_server.h"
  7. #include "sandbox/win/src/policy_low_level.h"
  8. #include "sandbox/win/src/sandbox_policy.h"
  9. namespace sandbox {
  10. // This class centralizes most of the knowledge related to the process
  11. // mitigations Win32K lockdown policy.
  12. class ProcessMitigationsWin32KLockdownPolicy {
  13. public:
  14. // Creates the required low-level policy rules to evaluate a high-level
  15. // policy rule for the Win32K process mitigation policy.
  16. // name is the object name, semantics is the desired semantics for the
  17. // open or create and policy is the policy generator to which the rules are
  18. // going to be added.
  19. static bool GenerateRules(const wchar_t* name,
  20. Semantics semantics,
  21. LowLevelPolicy* policy);
  22. };
  23. } // namespace sandbox
  24. #endif // SANDBOX_WIN_SRC_PROCESS_MITIGATIONS_WIN32K_POLICY_H_