mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-27 20:25:44 +00:00
26437f4ecd
Hook this into the browser via the XREAppData. This patch does not include the changes to Chromium source code. --HG-- extra : rebase_source : 4d5637bcdbeae605b0b99e9192598d48f371b698
88 lines
2.2 KiB
C++
88 lines
2.2 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "SandboxInitialization.h"
|
|
|
|
#include "sandbox/win/src/sandbox_factory.h"
|
|
#include "mozilla/sandboxing/permissionsService.h"
|
|
|
|
namespace mozilla {
|
|
namespace sandboxing {
|
|
|
|
static sandbox::TargetServices*
|
|
InitializeTargetServices()
|
|
{
|
|
sandbox::TargetServices* targetServices =
|
|
sandbox::SandboxFactory::GetTargetServices();
|
|
if (!targetServices) {
|
|
return nullptr;
|
|
}
|
|
|
|
if (targetServices->Init() != sandbox::SBOX_ALL_OK) {
|
|
return nullptr;
|
|
}
|
|
|
|
return targetServices;
|
|
}
|
|
|
|
sandbox::TargetServices*
|
|
GetInitializedTargetServices()
|
|
{
|
|
static sandbox::TargetServices* sInitializedTargetServices =
|
|
InitializeTargetServices();
|
|
|
|
return sInitializedTargetServices;
|
|
}
|
|
|
|
void
|
|
LowerSandbox()
|
|
{
|
|
GetInitializedTargetServices()->LowerToken();
|
|
}
|
|
|
|
static sandbox::BrokerServices*
|
|
InitializeBrokerServices()
|
|
{
|
|
sandbox::BrokerServices* brokerServices =
|
|
sandbox::SandboxFactory::GetBrokerServices();
|
|
if (!brokerServices) {
|
|
return nullptr;
|
|
}
|
|
|
|
if (brokerServices->Init() != sandbox::SBOX_ALL_OK) {
|
|
return nullptr;
|
|
}
|
|
|
|
// Comment below copied from Chromium code.
|
|
// Precreate the desktop and window station used by the renderers.
|
|
// IMPORTANT: This piece of code needs to run as early as possible in the
|
|
// process because it will initialize the sandbox broker, which requires
|
|
// the process to swap its window station. During this time all the UI
|
|
// will be broken. This has to run before threads and windows are created.
|
|
sandbox::TargetPolicy* policy = brokerServices->CreatePolicy();
|
|
sandbox::ResultCode result = policy->CreateAlternateDesktop(true);
|
|
policy->Release();
|
|
|
|
return brokerServices;
|
|
}
|
|
|
|
sandbox::BrokerServices*
|
|
GetInitializedBrokerServices()
|
|
{
|
|
static sandbox::BrokerServices* sInitializedBrokerServices =
|
|
InitializeBrokerServices();
|
|
|
|
return sInitializedBrokerServices;
|
|
}
|
|
|
|
PermissionsService* GetPermissionsService()
|
|
{
|
|
return PermissionsService::GetInstance();
|
|
}
|
|
|
|
} // sandboxing
|
|
} // mozilla
|