1// Copyright (c) 2012 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#ifndef SANDBOX_SRC_HANDLE_POLICY_H_
6#define SANDBOX_SRC_HANDLE_POLICY_H_
7
8#include <string>
9
10#include "base/basictypes.h"
11#include "sandbox/win/src/crosscall_server.h"
12#include "sandbox/win/src/policy_low_level.h"
13#include "sandbox/win/src/sandbox_policy.h"
14
15namespace sandbox {
16
17enum EvalResult;
18
19// This class centralizes most of the knowledge related to handle policy.
20class HandlePolicy {
21 public:
22  // Creates the required low-level policy rules to evaluate a high-level
23  // policy rule for handles, in particular duplicate action.
24  static bool GenerateRules(const wchar_t* type_name,
25                            TargetPolicy::Semantics semantics,
26                            LowLevelPolicy* policy);
27
28  // Processes a 'TargetPolicy::DuplicateHandle()' request from the target.
29  static DWORD DuplicateHandleProxyAction(EvalResult eval_result,
30                                          HANDLE source_handle,
31                                          DWORD target_process_id,
32                                          HANDLE* target_handle,
33                                          DWORD desired_access,
34                                          DWORD options);
35};
36
37}  // namespace sandbox
38
39#endif  // SANDBOX_SRC_HANDLE_POLICY_H_
40
41