18 #[cfg_attr(windows, path = "../bindings.rs")]
23 pub mod bindings;  module
27 pub use bindings::IntegrityLevel;
28 pub use bindings::JobLevel;
29 pub use bindings::MitigationFlags;
30 pub use bindings::ResultCode;
31 pub use bindings::Semantics;
32 pub use bindings::SubSystem;
33 pub use bindings::TokenLevel;
34 use bindings::DWORD;
35 pub use bindings::JOB_OBJECT_UILIMIT_ALL;
36 pub use bindings::JOB_OBJECT_UILIMIT_DESKTOP;
37 pub use bindings::JOB_OBJECT_UILIMIT_DISPLAYSETTINGS;
38 pub use bindings::JOB_OBJECT_UILIMIT_EXITWINDOWS;
39 pub use bindings::JOB_OBJECT_UILIMIT_GLOBALATOMS;
40 pub use bindings::JOB_OBJECT_UILIMIT_HANDLES;
41 pub use bindings::JOB_OBJECT_UILIMIT_NONE;
42 pub use bindings::JOB_OBJECT_UILIMIT_READCLIPBOARD;
43 pub use bindings::JOB_OBJECT_UILIMIT_SYSTEMPARAMETERS;
44 pub use bindings::JOB_OBJECT_UILIMIT_WRITECLIPBOARD;
45 pub use bindings::MITIGATION_BOTTOM_UP_ASLR;
46 pub use bindings::MITIGATION_CET_DISABLED;
47 pub use bindings::MITIGATION_DEP;
48 pub use bindings::MITIGATION_DEP_NO_ATL_THUNK;
49 pub use bindings::MITIGATION_DLL_SEARCH_ORDER;
50 pub use bindings::MITIGATION_DYNAMIC_CODE_DISABLE;
51 pub use bindings::MITIGATION_DYNAMIC_CODE_DISABLE_WITH_OPT_OUT;
52 pub use bindings::MITIGATION_DYNAMIC_CODE_OPT_OUT_THIS_THREAD;
53 pub use bindings::MITIGATION_EXTENSION_POINT_DISABLE;
54 pub use bindings::MITIGATION_FORCE_MS_SIGNED_BINS;
55 pub use bindings::MITIGATION_HARDEN_TOKEN_IL_POLICY;
56 pub use bindings::MITIGATION_HEAP_TERMINATE;
57 pub use bindings::MITIGATION_HIGH_ENTROPY_ASLR;
58 pub use bindings::MITIGATION_IMAGE_LOAD_NO_LOW_LABEL;
59 pub use bindings::MITIGATION_IMAGE_LOAD_NO_REMOTE;
60 pub use bindings::MITIGATION_IMAGE_LOAD_PREFER_SYS32;
61 pub use bindings::MITIGATION_KTM_COMPONENT;
62 pub use bindings::MITIGATION_NONSYSTEM_FONT_DISABLE;
63 pub use bindings::MITIGATION_RELOCATE_IMAGE;
64 pub use bindings::MITIGATION_RELOCATE_IMAGE_REQUIRED;
65 pub use bindings::MITIGATION_RESTRICT_INDIRECT_BRANCH_PREDICTION;
66 pub use bindings::MITIGATION_SEHOP;
67 pub use bindings::MITIGATION_STRICT_HANDLE_CHECKS;
68 pub use bindings::MITIGATION_WIN32K_DISABLE;
69 use bindings::PROCESS_INFORMATION;
100         if result_code == bindings::ResultCode::SBOX_ERROR_GENERIC {  in new()
114             result_code: bindings::ResultCode::SBOX_ERROR_GENERIC,  in from()
128     broker: *mut bindings::BrokerServices,
134     target: *mut bindings::TargetServices,
143 struct TargetPolicyWrapper(*mut bindings::TargetPolicy);
148         unsafe { bindings::sbox_release_policy(self.0) };  in drop()
160     policy_info: *mut bindings::PolicyInfo,
165         unsafe { bindings::sbox_release_policy_info(self.policy_info) }  in drop()
173     unsafe { !bindings::get_broker_services().is_null() }  in is_sandbox_broker()
180     unsafe { !bindings::get_target_services().is_null() }  in is_sandbox_target()
196                 let broker = bindings::get_broker_services();  in get()
221         let result_code = unsafe { bindings::sbox_broker_init(self.broker) };  in init()
232         let policy = unsafe { bindings::sbox_create_policy(self.broker) };  in create_policy()
262             bindings::sbox_spawn_target(  in spawn_target()
308         let result_code = unsafe { bindings::sbox_wait_for_all_targets(self.broker) };  in wait_for_all_targets()
330                 let target = bindings::get_target_services();  in get()
356         let result_code = unsafe { bindings::sbox_target_init(self.target) };  in init()
370         unsafe { bindings::sbox_lower_token(self.target) };  in lower_token()
381         match unsafe { bindings::sbox_set_token_level(self.policy.0, initial, lockdown) } {  in set_token_level()
390         unsafe { bindings::sbox_get_initial_token_level(self.policy.0) }  in initial_token_level()
396         unsafe { bindings::sbox_get_lockdown_token_level(self.policy.0) }  in lockdown_token_level()
406         match unsafe { bindings::sbox_set_job_level(self.policy.0, job_level, ui_exceptions) } {  in set_job_level()
415         unsafe { bindings::sbox_get_job_level(self.policy.0) }  in job_level()
424         match unsafe { bindings::sbox_set_integrity_level(self.policy.0, level) } {  in set_integrity_level()
436         match unsafe { bindings::sbox_set_delayed_integrity_level(self.policy.0, level) } {  in set_delayed_integrity_level()
445         unsafe { bindings::sbox_get_integrity_level(self.policy.0) }  in integrity_level()
456         match unsafe { bindings::sbox_set_alternate_desktop(self.policy.0, alternate_winstation) } {  in set_alternate_desktop()
469             bindings::sbox_create_alternate_desktop(self.policy.0, alternate_winstation)  in create_alternate_desktop()
482         unsafe { bindings::sbox_destroy_alternate_desktop(self.policy.0) }  in destroy_alternate_desktop()
492         match unsafe { bindings::sbox_set_lowbox(self.policy.0, win32_wide_string(sid).as_ptr()) } {  in set_lowbox()
504         match unsafe { bindings::sbox_set_process_mitigations(self.policy.0, flags) } {  in set_process_mitigations()
513         unsafe { bindings::sbox_get_process_mitigations(self.policy.0) }  in process_mitigations()
523         match unsafe { bindings::sbox_set_delayed_process_mitigations(self.policy.0, flags) } {  in set_delayed_process_mitigations()
532         unsafe { bindings::sbox_get_delayed_process_mitigations(self.policy.0) }  in delayed_process_mitigations()
542         match unsafe { bindings::sbox_set_disconnect_csrss(self.policy.0) } {  in set_disconnect_csrss()
554         unsafe { bindings::sbox_set_strict_interceptions(self.policy.0) }  in set_strict_interceptions()
572         match unsafe { bindings::sbox_set_stdout_handle(self.policy.0, handle.as_raw_descriptor()) }  in set_stdout_handle()
600         match unsafe { bindings::sbox_set_stderr_handle(self.policy.0, handle.as_raw_descriptor()) }  in set_stderr_handle()
641             bindings::sbox_add_rule(  in add_rule()
662             bindings::sbox_add_dll_to_unload(self.policy.0, win32_wide_string(dll_name).as_ptr())  in add_dll_to_unload()
688             bindings::sbox_add_kernel_object_to_close(  in add_kernel_object_to_close()
706             bindings::sbox_add_handle_to_share(self.policy.0, handle.as_raw_descriptor());  in add_handle_to_share()
719             bindings::sbox_set_lockdown_default_dacl(self.policy.0);  in set_lockdown_default_dacl()
731             bindings::sbox_add_restricting_random_sid(self.policy.0);  in add_restricting_random_sid()
752             bindings::sbox_add_app_container_profile(  in add_app_container_profile()
770             policy_info: unsafe { bindings::sbox_get_policy_info(self.policy.0) },  in policy_info()
786             unsafe { CStr::from_ptr(bindings::sbox_policy_info_json_string(self.policy_info)) };  in json()