1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
#define CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
#include <windows.h>
#include <netfw.h>
#include <stdint.h>
#include <wrl/client.h>
#include <string>
#include <vector>
#include "base/files/file_path.h"
namespace installer {
// Manages firewall rules using Advanced Security Windows API. The API is
// available on Windows Vista and later. Most methods need elevation.
class AdvancedFirewallManager {
public:
AdvancedFirewallManager();
AdvancedFirewallManager(const AdvancedFirewallManager&) = delete;
AdvancedFirewallManager& operator=(const AdvancedFirewallManager&) = delete;
~AdvancedFirewallManager();
// Initializes object to manage application win name |app_name| and path
// |app_path|.
bool Init(const std::wstring& app_name, const base::FilePath& app_path);
// Returns true if firewall is enabled.
bool IsFirewallEnabled();
// Returns true if there is any rule for the application.
bool HasAnyRule();
// Adds a firewall rule allowing inbound connections to the application on UDP
// port |port|. Replaces the rule if it already exists. Needs elevation.
bool AddUDPRule(const std::wstring& rule_name,
const std::wstring& description,
uint16_t port);
// Deletes all rules with specified name. Needs elevation.
void DeleteRuleByName(const std::wstring& rule_name);
// Deletes all rules for current app. Needs elevation.
void DeleteAllRules();
private:
friend class AdvancedFirewallManagerTest;
// Creates a firewall rule allowing inbound connections to UDP port |port|.
Microsoft::WRL::ComPtr<INetFwRule> CreateUDPRule(
const std::wstring& rule_name,
const std::wstring& description,
uint16_t port);
// Returns the list of rules applying to the application.
void GetAllRules(std::vector<Microsoft::WRL::ComPtr<INetFwRule>>* rules);
// Deletes rules. Needs elevation.
void DeleteRule(Microsoft::WRL::ComPtr<INetFwRule> rule);
std::wstring app_name_;
base::FilePath app_path_;
Microsoft::WRL::ComPtr<INetFwPolicy2> firewall_policy_;
Microsoft::WRL::ComPtr<INetFwRules> firewall_rules_;
};
} // namespace installer
#endif // CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
|
