summaryrefslogtreecommitdiffstats
path: root/sandbox/win/src/restricted_token_utils.h
diff options
context:
space:
mode:
Diffstat (limited to 'sandbox/win/src/restricted_token_utils.h')
-rw-r--r--sandbox/win/src/restricted_token_utils.h11
1 files changed, 6 insertions, 5 deletions
diff --git a/sandbox/win/src/restricted_token_utils.h b/sandbox/win/src/restricted_token_utils.h
index 509feaf..40d2286 100644
--- a/sandbox/win/src/restricted_token_utils.h
+++ b/sandbox/win/src/restricted_token_utils.h
@@ -8,6 +8,7 @@
#include <accctrl.h>
#include <windows.h>
+#include "base/win/scoped_handle.h"
#include "sandbox/win/src/restricted_token.h"
#include "sandbox/win/src/security_level.h"
@@ -27,15 +28,15 @@ enum TokenType {
// restricted. The token_type determines if the token will be used as a primary
// token or impersonation token. The integrity level of the token is set to
// |integrity level| on Vista only.
-// token_handle is the output value containing the handle of the
-// newly created restricted token.
+// |token| is the output value containing the handle of the newly created
+// restricted token.
// If the function succeeds, the return value is ERROR_SUCCESS. If the
// function fails, the return value is the win32 error code corresponding to
// the error.
-DWORD CreateRestrictedToken(HANDLE *token_handle,
- TokenLevel security_level,
+DWORD CreateRestrictedToken(TokenLevel security_level,
IntegrityLevel integrity_level,
- TokenType token_type);
+ TokenType token_type,
+ base::win::ScopedHandle* token);
// Starts the process described by the input parameter command_line in a job
// with a restricted token. Also set the main thread of this newly created