1 files changed, 33 insertions, 0 deletions
diff --git a/security/sandbox/chromium/sandbox/win/src/security_capabilities.cc b/security/sandbox/chromium/sandbox/win/src/security_capabilities.cc
new file mode 100644
index 0000000000..0df446b5be
--- /dev/null
+++ b/security/sandbox/chromium/sandbox/win/src/security_capabilities.cc
@@ -0,0 +1,33 @@
+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "sandbox/win/src/security_capabilities.h"
+#include "base/numerics/safe_conversions.h"
+
+namespace sandbox {
+
+SecurityCapabilities::SecurityCapabilities(const Sid& package_sid,
+                                           const std::vector<Sid>& capabilities)
+    : SECURITY_CAPABILITIES(),
+      capabilities_(capabilities),
+      package_sid_(package_sid) {
+  AppContainerSid = package_sid_.GetPSID();
+  if (capabilities_.empty())
+    return;
+
+  capability_sids_.resize(capabilities_.size());
+  for (size_t index = 0; index < capabilities_.size(); ++index) {
+    capability_sids_[index].Sid = capabilities_[index].GetPSID();
+    capability_sids_[index].Attributes = SE_GROUP_ENABLED;
+  }
+  CapabilityCount = base::checked_cast<DWORD>(capability_sids_.size());
+  Capabilities = capability_sids_.data();
+}
+
+SecurityCapabilities::SecurityCapabilities(const Sid& package_sid)
+    : SecurityCapabilities(package_sid, std::vector<Sid>()) {}
+
+SecurityCapabilities::~SecurityCapabilities() {}
+
+}  // namespace sandbox