| commit | eae1886dee8fdbb150b31ca482f8edc0e09ab446 | |
| author | liamjm <liamjm@chromium.org> | |
| Thu, 16 Jul 2015 00:37:08 +0000 (15 17:37 -0700) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Thu, 16 Jul 2015 00:38:20 +0000 (16 00:38 +0000) | ||
| tree | a29b09968ccb4315bb7462dc204526a925215010 | treesnapshot (tar.gz zip) |
| parent | 88eb8193f91f25c92493e8ee8e9e272c308aae85 | commitdiff |
close ALPC ports in sbox integrations tests. This is the first step in locking down ALPC ports.
Closing ALPC ports causes the following tests to break, because they call CreateProcess(). The interception of CreateProcess() tries to call CreateProcess natively, which crashes.
ProcessPolicyTest.TestGetProcessTokenMaxAccess
ProcessPolicyTest.TestGetProcessTokenMaxAccessNoJob
PolicyTargetTest.OpenThread
The changes in process_thread_interception.cc check to see if CSRSS is disconnected, and doesn't use the native CreateProcess if CSRSS is disconnected. This connected flag is implicitly set in the HandleCloserAgent when type "ALPC Port" are requested to be closed.
Therefore this still only affects sbox_integration_tests, but adds some of the capability that will be needed to further lock down CSRSS.
BUG=464430
Review URL: https://codereview.chromium.org/1226383005
Cr-Commit-Position: refs/heads/master@{#338963}
Closing ALPC ports causes the following tests to break, because they call CreateProcess(). The interception of CreateProcess() tries to call CreateProcess natively, which crashes.
ProcessPolicyTest.TestGetProcessTokenMaxAccess
ProcessPolicyTest.TestGetProcessTokenMaxAccessNoJob
PolicyTargetTest.OpenThread
The changes in process_thread_interception.cc check to see if CSRSS is disconnected, and doesn't use the native CreateProcess if CSRSS is disconnected. This connected flag is implicitly set in the HandleCloserAgent when type "ALPC Port" are requested to be closed.
Therefore this still only affects sbox_integration_tests, but adds some of the capability that will be needed to further lock down CSRSS.
BUG=464430
Review URL: https://codereview.chromium.org/1226383005
Cr-Commit-Position: refs/heads/master@{#338963}