diff options
Diffstat (limited to 'sandbox/win/src/sync_policy.h')
-rw-r--r-- | sandbox/win/src/sync_policy.h | 51 |
1 files changed, 51 insertions, 0 deletions
diff --git a/sandbox/win/src/sync_policy.h b/sandbox/win/src/sync_policy.h new file mode 100644 index 0000000..6404f79 --- /dev/null +++ b/sandbox/win/src/sync_policy.h @@ -0,0 +1,51 @@ +// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +#ifndef SANDBOX_SRC_SYNC_POLICY_H__ +#define SANDBOX_SRC_SYNC_POLICY_H__ + +#include <string> + +#include "base/basictypes.h" +#include "sandbox/src/crosscall_server.h" +#include "sandbox/src/nt_internals.h" +#include "sandbox/src/policy_low_level.h" +#include "sandbox/src/sandbox_policy.h" + +namespace sandbox { + +enum EvalResult; + +// This class centralizes most of the knowledge related to sync policy +class SyncPolicy { + public: + // Creates the required low-level policy rules to evaluate a high-level + // policy rule for sync calls, in particular open or create actions. + // name is the sync object name, semantics is the desired semantics for the + // open or create and policy is the policy generator to which the rules are + // going to be added. + static bool GenerateRules(const wchar_t* name, + TargetPolicy::Semantics semantics, + LowLevelPolicy* policy); + + // Performs the desired policy action on a request. + // client_info is the target process that is making the request and + // eval_result is the desired policy action to accomplish. + static DWORD CreateEventAction(EvalResult eval_result, + const ClientInfo& client_info, + const std::wstring &event_name, + uint32 manual_reset, + uint32 initial_state, + HANDLE *handle); + static DWORD OpenEventAction(EvalResult eval_result, + const ClientInfo& client_info, + const std::wstring &event_name, + uint32 desired_access, + uint32 inherit_handle, + HANDLE *handle); +}; + +} // namespace sandbox + +#endif // SANDBOX_SRC_SYNC_POLICY_H__ |