advanced_firewall_manager_win.h

// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_
#define CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_

#include <windows.h>

#include <netfw.h>
#include <stdint.h>
#include <wrl/client.h>

#include <string>
#include <vector>

#include "base/files/file_path.h"

namespace installer {

// Manages firewall rules using Advanced Security Windows API. The API is
// available on Windows Vista and later. Most methods need elevation.
class AdvancedFirewallManager {
 public:
  AdvancedFirewallManager();

  AdvancedFirewallManager(const AdvancedFirewallManager&) = delete;
  AdvancedFirewallManager& operator=(const AdvancedFirewallManager&) = delete;

  ~AdvancedFirewallManager();

  // Initializes object to manage application win name |app_name| and path
  // |app_path|.
  bool Init(const std::wstring& app_name, const base::FilePath& app_path);

  // Returns true if firewall is enabled.
  bool IsFirewallEnabled();

  // Returns true if there is any rule for the application.
  bool HasAnyRule();

  // Adds a firewall rule allowing inbound connections to the application on UDP
  // port |port|. Replaces the rule if it already exists. Needs elevation.
  bool AddUDPRule(const std::wstring& rule_name,
                  const std::wstring& description,
                  uint16_t port);

  // Deletes all rules with specified name. Needs elevation.
  void DeleteRuleByName(const std::wstring& rule_name);

  // Deletes all rules for current app. Needs elevation.
  void DeleteAllRules();

 private:
  friend class AdvancedFirewallManagerTest;

  // Creates a firewall rule allowing inbound connections to UDP port |port|.
  Microsoft::WRL::ComPtr<INetFwRule> CreateUDPRule(
      const std::wstring& rule_name,
      const std::wstring& description,
      uint16_t port);

  // Returns the list of rules applying to the application.
  void GetAllRules(std::vector<Microsoft::WRL::ComPtr<INetFwRule>>* rules);

  // Deletes rules. Needs elevation.
  void DeleteRule(Microsoft::WRL::ComPtr<INetFwRule> rule);

  std::wstring app_name_;
  base::FilePath app_path_;
  Microsoft::WRL::ComPtr<INetFwPolicy2> firewall_policy_;
  Microsoft::WRL::ComPtr<INetFwRules> firewall_rules_;
};

}  // namespace installer

#endif  // CHROME_INSTALLER_UTIL_ADVANCED_FIREWALL_MANAGER_WIN_H_