diff options
| author | jschuh@chromium.org <jschuh@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-07-21 02:52:13 +0000 |
|---|---|---|
| committer | jschuh@chromium.org <jschuh@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2011-07-21 02:52:13 +0000 |
| commit | 17246ff04de0dd4b9eec8b9f6efdc76bba23bb31 (patch) | |
| tree | 3d53c6031a7f382434ee49a9161a8e7a28ba9e96 /sandbox/src/sandbox_policy.h | |
| parent | 3a719b37becda4dd9fe6cfe8215edd7dfbabd39e (diff) | |
| download | chromium_src-17246ff04de0dd4b9eec8b9f6efdc76bba23bb31.zip chromium_src-17246ff04de0dd4b9eec8b9f6efdc76bba23bb31.tar.gz chromium_src-17246ff04de0dd4b9eec8b9f6efdc76bba23bb31.tar.bz2 | |
Add a sandbox API to allow closing open handles at lockdown.
BUG=58069
BUG=74242
TEST=sbox_integration_tests --gtest_filter=HandleCloserTests.*
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=93274
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=93308
Review URL: http://codereview.chromium.org/7253054
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@93321 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'sandbox/src/sandbox_policy.h')
| -rw-r--r-- | sandbox/src/sandbox_policy.h | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/sandbox/src/sandbox_policy.h b/sandbox/src/sandbox_policy.h index 716cefa..4f21158 100644 --- a/sandbox/src/sandbox_policy.h +++ b/sandbox/src/sandbox_policy.h @@ -1,4 +1,4 @@ -// Copyright (c) 2006-2009 The Chromium Authors. All rights reserved. +// Copyright (c) 2006-2011 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. @@ -172,6 +172,12 @@ class TargetPolicy { // a chance to initialize itself. Typically, dlls that cause the target // to crash go here. virtual ResultCode AddDllToUnload(const wchar_t* dll_name) = 0; + + // Adds a handle that will be closed in the target process after lockdown. + // A NULL value for handle_name indicates all handles of the specified type. + // An empty string for handle_name indicates the handle is unnamed. + virtual ResultCode AddKernelObjectToClose(const wchar_t* handle_type, + const wchar_t* handle_name) = 0; }; } // namespace sandbox |