The Tor Browser: security/sandbox/win/src/process

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.

     2 // Use of this source code is governed by a BSD-style license that can be

     3 // found in the LICENSE file.

     5 #ifndef SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_

     6 #define SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_

     8 #include <windows.h>

    10 #include "base/basictypes.h"

    11 #include "sandbox/win/src/security_level.h"

    13 namespace sandbox {

    15 // Sets the mitigation policy for the current process, ignoring any settings

    16 // that are invalid for the current version of Windows.

    17 bool ApplyProcessMitigationsToCurrentProcess(MitigationFlags flags);

    19 // Returns the flags that must be enforced after startup for the current OS

    20 // version.

    21 MitigationFlags FilterPostStartupProcessMitigations(MitigationFlags flags);

    23 // Converts sandbox flags to the PROC_THREAD_ATTRIBUTE_SECURITY_CAPABILITIES

    24 // policy flags used by UpdateProcThreadAttribute(). The size field varies

    25 // between a 32-bit and a 64-bit type based on the exact build and version of

    26 // Windows, so the returned size must be passed to UpdateProcThreadAttribute().

    27 void ConvertProcessMitigationsToPolicy(MitigationFlags flags,

    28                                        DWORD64* policy_flags, size_t* size);

    30 // Adds mitigations that need to be performed on the suspended target process

    31 // before execution begins.

    32 bool ApplyProcessMitigationsToSuspendedProcess(HANDLE process,

    33                                                MitigationFlags flags);

    35 // Returns true if all the supplied flags can be set after a process starts.

    36 bool CanSetProcessMitigationsPostStartup(MitigationFlags flags);

    38 // Returns true if all the supplied flags can be set before a process starts.

    39 bool CanSetProcessMitigationsPreStartup(MitigationFlags flags);

    41 }  // namespace sandbox

    43 #endif  // SANDBOX_SRC_WIN_PROCESS_MITIGATIONS_H_

The Tor Browser / file revision