blob: 91b984d70e3d4e842b3780099ffe0803cf7b86a4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
#define CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
#include <windows.h>
#include <netfw.h>
#include <vector>
#include "base/files/file_path.h"
#include "base/strings/string16.h"
#include "base/win/scoped_comptr.h"
namespace installer {
// Manages firewall rules using Advanced Security Windows API. The API is
// available on Windows Vista and later. Most methods need elevation.
class AdvancedFirewallManager {
public:
AdvancedFirewallManager();
~AdvancedFirewallManager();
// Initializes object to manage application win name |app_name| and path
// |app_path|.
bool Init(const base::string16& app_name, const base::FilePath& app_path);
// Returns true if firewall is enabled.
bool IsFirewallEnabled();
// Returns true if there is any rule for the application.
bool HasAnyRule();
// Adds a firewall rule allowing inbound connections to the application on UDP
// port |port|. Replaces the rule if it already exists. Needs elevation.
bool AddUDPRule(const base::string16& rule_name,
const base::string16& description,
uint16_t port);
// Deletes all rules with specified name. Needs elevation.
void DeleteRuleByName(const base::string16& rule_name);
// Deletes all rules for current app. Needs elevation.
void DeleteAllRules();
private:
friend class AdvancedFirewallManagerTest;
// Creates a firewall rule allowing inbound connections to UDP port |port|.
base::win::ScopedComPtr<INetFwRule> CreateUDPRule(
const base::string16& rule_name,
const base::string16& description,
uint16_t port);
// Returns the list of rules applying to the application.
void GetAllRules(std::vector<base::win::ScopedComPtr<INetFwRule> >* rules);
// Deletes rules. Needs elevation.
void DeleteRule(base::win::ScopedComPtr<INetFwRule> rule);
base::string16 app_name_;
base::FilePath app_path_;
base::win::ScopedComPtr<INetFwPolicy2> firewall_policy_;
base::win::ScopedComPtr<INetFwRules> firewall_rules_;
DISALLOW_COPY_AND_ASSIGN(AdvancedFirewallManager);
};
} // namespace installer
#endif // CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
|
