PROCESS_ACCESS_MASK.hh

Go to the documentation of this file.

/*
 * Copyright 2021 Assured Information Security, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *         http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#pragma once
 
#include "ACCESS_MASK.hh"
 
namespace introvirt {
namespace windows {
namespace nt {
 
enum ProcessAccessMaskFlag {
    PROCESS_TERMINATE = 0x001,
    PROCESS_CREATE_THREAD = 0x002,
    PROCESS_VM_OPERATION = 0x008,
    PROCESS_VM_READ = 0x010,
    PROCESS_VM_WRITE = 0x020,
    PROCESS_DUP_HANDLE = 0x040,
    PROCESS_CREATE_PROCESS = 0x080,
    PROCESS_SET_QUOTA = 0x100,
    PROCESS_SET_INFORMATION = 0x200,
    PROCESS_QUERY_INFORMATION = 0x400,
    PROCESS_SUSPEND_RESUME = 0x800,
 
    PROCESS_QUERY_LIMITED_INFORMATION = 0x1000,
 
    PROCESS_ALL_ACCESS = (0x000F0000L | 0x00100000L | 0xFFF),
};
 
class PROCESS_ACCESS_MASK final : public ACCESS_MASK {
  public:
    bool has(ProcessAccessMaskFlag flag) const { return (value() & flag) == flag; }
 
    void set(ProcessAccessMaskFlag flag) { value(value() | flag); }
 
    void clear(ProcessAccessMaskFlag flag) { value(value() & ~flag); }
 
    AccessMaskType type() const override { return ProcessAccessMask; }
 
    // Constructors and assignment operators
    PROCESS_ACCESS_MASK() = default;
    PROCESS_ACCESS_MASK(uint32_t mask) : ACCESS_MASK(mask) {}
 
    PROCESS_ACCESS_MASK(const PROCESS_ACCESS_MASK&) = default;
    PROCESS_ACCESS_MASK& operator=(const PROCESS_ACCESS_MASK&) = default;
};
 
const std::string& to_string(ProcessAccessMaskFlag);
std::ostream& operator<<(std::ostream&, ProcessAccessMaskFlag);
 
std::string to_string(PROCESS_ACCESS_MASK);
std::ostream& operator<<(std::ostream&, PROCESS_ACCESS_MASK);
 
} /* namespace nt */
} /* namespace windows */
} /* namespace introvirt */