Chromoting: Implemented security attention sequence (SAS) emulation on Windows.

remoting/host/wts_session_process_launcher_win.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef REMOTING_HOST_WTS_SESSION_PROCESS_LAUNCHER_WIN_H_
 #define REMOTING_HOST_WTS_SESSION_PROCESS_LAUNCHER_WIN_H_
 
 #include <windows.h>
 
 #include "base/basictypes.h"
 #include "base/file_path.h"
 #include "base/compiler_specific.h"
 #include "base/process.h"
 #include "base/time.h"
 #include "base/timer.h"
 #include "base/win/scoped_handle.h"
 #include "base/win/object_watcher.h"
+#include "ipc/ipc_channel.h"
 
 #include "remoting/host/wts_console_observer_win.h"
 
+namespace base {
+
+class Thread;
+
+} // namespace base
+
+namespace IPC {
+
+class ChannelProxy;
+class Message;
+
+} // namespace IPC
+
 namespace remoting {
 
+class SasInjector;
 class WtsConsoleMonitor;
 
 class WtsSessionProcessLauncher
     : public base::win::ObjectWatcher::Delegate,
+      public IPC::Channel::Listener,
       public WtsConsoleObserver {
  public:
-  // Constructs a WtsSessionProcessLauncher object. |monitor| must outlive this
-  // class. |host_binary| is the name of the executable to be launched in
-  // the console session.
+  // Constructs a WtsSessionProcessLauncher object. |monitor| and |io_thread|
+  // must outlive this object. |host_binary| is the name of the executable to
+  // be launched in the console session.
   WtsSessionProcessLauncher(WtsConsoleMonitor* monitor,
-                            const FilePath& host_binary);
+                            const FilePath& host_binary,
+                            base::Thread* io_thread);
 
   virtual ~WtsSessionProcessLauncher();
 
-  // base::win::ObjectWatcher::Delegate implementation
+  // base::win::ObjectWatcher::Delegate implementation.
   virtual void OnObjectSignaled(HANDLE object) OVERRIDE;
 
-  // WtsConsoleObserver implementation
+  // IPC::Channel::Listener implementation.
+  virtual bool OnMessageReceived(const IPC::Message& message) OVERRIDE;
+
+  // WtsConsoleObserver implementation.
   virtual void OnSessionAttached(uint32 session_id) OVERRIDE;
   virtual void OnSessionDetached() OVERRIDE;
 
  private:
   // Attempts to launch the host process in the current console session.
   // Schedules next launch attempt if creation of the process fails for any
   // reason.
   void LaunchProcess();
 
+  // Sends the security attention sequence to the session represented by

[Wez, 2012/03/08 22:58:55]

nit: Secure Attention Sequence

[alexeypa (please no reviews), 2012/03/09 01:13:54]

Done.

+  // |session_token_|.
+  void OnSendSasToConsole();
+
   // Name of the host executable.
   FilePath host_binary_;
 
   // Time of the last launch attempt.
   base::Time launch_time_;
 
   // Current backoff delay.
   base::TimeDelta launch_backoff_;
 
   // Timer used to schedule the next attempt to launch the process.
   base::OneShotTimer<WtsSessionProcessLauncher> timer_;
 
+  // Pointer to the I/O thread.

[Wez, 2012/03/08 22:58:55]

nit: I can see that from the naming.  What's it used for, though? ;)

[alexeypa (please no reviews), 2012/03/09 01:13:54]

Done.

+  base::Thread* io_thread_;
+
   // This pointer is used to unsubscribe from session attach and detach events.
   WtsConsoleMonitor* monitor_;
 
   // Impersonation token that has the SE_TCB_NAME privilege enabled.
   base::win::ScopedHandle privileged_token_;
 
   // The handle of the process injected into the console session.
   base::Process process_;
 
   // Used to determine when the launched process terminates.
   base::win::ObjectWatcher process_watcher_;
 
   // The token to be used to launch a process in a different session.
   base::win::ScopedHandle session_token_;
 
   // Defines the states the process launcher can be in.
   enum State {
     StateDetached,
     StateStarting,
     StateAttached,
   };
 
   // Current state of the process launcher.
   State state_;
 
+  // The server endpoint of the chromoting IPC channel.

[Wez, 2012/03/08 22:58:55]

Is it relevant that it's the server endpoint? Would it be valid to describe it
as the IPC channel to the per-session process?

[alexeypa (please no reviews), 2012/03/09 01:13:54]

Done.

+  scoped_ptr<IPC::ChannelProxy> chromoting_channel_;
+
+  scoped_ptr<SasInjector> sas_injector_;
+
   DISALLOW_COPY_AND_ASSIGN(WtsSessionProcessLauncher);
 };
 
 }  // namespace remoting
 
 #endif  // REMOTING_HOST_WTS_SESSION_PROCESS_LAUNCHER_WIN_H_