Commit 0da11710 authored by jschuh@chromium.org's avatar jschuh@chromium.org

Close "Internet Settings" key in the sandbox

BUG=349162
R=cpu@chromium.org

Review URL: https://codereview.chromium.org/418943003

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@285441 0039d316-1c4b-4281-b951-d872f2087c98
parent 6550f760
...@@ -351,6 +351,12 @@ bool AddPolicyForSandboxedProcess(sandbox::TargetPolicy* policy) { ...@@ -351,6 +351,12 @@ bool AddPolicyForSandboxedProcess(sandbox::TargetPolicy* policy) {
if (base::win::GetVersion() > base::win::VERSION_WIN7) if (base::win::GetVersion() > base::win::VERSION_WIN7)
policy->AddKernelObjectToClose(L"File", L"\\Device\\DeviceApi"); policy->AddKernelObjectToClose(L"File", L"\\Device\\DeviceApi");
// Close the proxy settings on XP.
if (base::win::GetVersion() <= base::win::VERSION_SERVER_2003)
policy->AddKernelObjectToClose(L"Key",
L"HKCU\\Software\\Microsoft\\Windows\\" \
L"CurrentVersion\\Internet Settings");
sandbox::TokenLevel initial_token = sandbox::USER_UNPROTECTED; sandbox::TokenLevel initial_token = sandbox::USER_UNPROTECTED;
if (base::win::GetVersion() > base::win::VERSION_XP) { if (base::win::GetVersion() > base::win::VERSION_XP) {
// On 2003/Vista the initial token has to be restricted if the main // On 2003/Vista the initial token has to be restricted if the main
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment