summaryrefslogtreecommitdiffstats
path: root/chrome/browser/policy/configuration_policy_provider_win.h
blob: 26bc3e640258421d95fbf9eac8bc8331663ade2f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
// Copyright (c) 2010 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CHROME_BROWSER_POLICY_CONFIGURATION_POLICY_PROVIDER_WIN_H_
#define CHROME_BROWSER_POLICY_CONFIGURATION_POLICY_PROVIDER_WIN_H_
#pragma once

#include "base/object_watcher.h"
#include "base/ref_counted.h"
#include "base/scoped_ptr.h"
#include "base/waitable_event.h"
#include "base/weak_ptr.h"
#include "chrome/browser/policy/configuration_policy_store.h"
#include "chrome/browser/policy/configuration_policy_provider.h"

namespace base {
namespace win {
class RegKey;
}  // namespace win
}  // namespace base

namespace policy {

// An implementation of |ConfigurationPolicyProvider| using the
// mechanism provided by Windows Groups Policy. Policy decisions are
// stored as values in a special section of the Windows Registry.
// On a managed machine in a domain, this portion of the registry is
// periodically updated by the Windows Group Policy machinery to contain
// the latest version of the policy set by administrators.
class ConfigurationPolicyProviderWin
    : public ConfigurationPolicyProvider,
      public base::SupportsWeakPtr<ConfigurationPolicyProviderWin> {
 public:
  // Keeps watch on Windows Group Policy notification event to trigger a policy
  // reload when Group Policy changes. This class is reference counted to
  // facilitate timer-based reloads through the message loop. It is not safe to
  // access GroupPolicyChangeWatcher concurrently from multiple threads.
  class GroupPolicyChangeWatcher
      : public base::ObjectWatcher::Delegate,
        public MessageLoop::DestructionObserver,
        public base::RefCountedThreadSafe<GroupPolicyChangeWatcher> {
   public:
    GroupPolicyChangeWatcher(
        base::WeakPtr<ConfigurationPolicyProviderWin> provider,
        int reload_interval_minutes);
    virtual ~GroupPolicyChangeWatcher();

    // Start watching.
    void Start();

    // Stop any pending watch activity in order to allow for timely shutdown.
    void Stop();

   private:
    // Updates the watchers and schedules the reload task if appropriate.
    void SetupWatches();

    // Post a reload notification and update the watch machinery.
    void Reload();

    // Called for timer-based refresh from the message loop.
    void ReloadFromTask();

    // ObjectWatcher::Delegate implementation:
    virtual void OnObjectSignaled(HANDLE object);

    // MessageLoop::DestructionObserver implementation:
    virtual void WillDestroyCurrentMessageLoop();

    base::WeakPtr<ConfigurationPolicyProviderWin> provider_;
    base::WaitableEvent user_policy_changed_event_;
    base::WaitableEvent machine_policy_changed_event_;
    base::ObjectWatcher user_policy_watcher_;
    base::ObjectWatcher machine_policy_watcher_;
    bool user_policy_watcher_failed_;
    bool machine_policy_watcher_failed_;

    // Period to schedule the reload task at.
    int reload_interval_minutes_;

    // A reference to a delayed task for timer-based reloading.
    CancelableTask* reload_task_;
  };

  explicit ConfigurationPolicyProviderWin(
      const StaticPolicyValueMap& policy_map);
  virtual ~ConfigurationPolicyProviderWin();

  // ConfigurationPolicyProvider method overrides:
  virtual bool Provide(ConfigurationPolicyStore* store);

 protected:
  // The sub key path for Chromium's Group Policy information in the
  // Windows registry.
  static const wchar_t kPolicyRegistrySubKey[];

 private:
  scoped_refptr<GroupPolicyChangeWatcher> watcher_;

  // Methods to perform type-specific policy lookups in the registry.
  // HKLM is checked first, then HKCU.

  // Reads a string registry value |name| at the specified |key| and puts the
  // resulting string in |result|.

  bool GetRegistryPolicyString(const string16& name, string16* result);
  // Gets a list value contained under |key| one level below the policy root.
  bool GetRegistryPolicyStringList(const string16& key, ListValue* result);
  bool GetRegistryPolicyBoolean(const string16& value_name, bool* result);
  bool GetRegistryPolicyInteger(const string16& value_name, uint32* result);
};

}  // namespace policy

#endif  // CHROME_BROWSER_POLICY_CONFIGURATION_POLICY_PROVIDER_WIN_H_