Struct MitigationPolicy 

pub struct MitigationPolicy { /* private fields */ }

A complete SDK 10.0.22621 process-creation mitigation policy.

Setters replace one field. Reserved values and combined raw policy words cannot be represented.

Runtime support

This type mirrors the policy fields in Windows SDK 10.0.22621; it is not a claim that every field works on every supported Windows installation. Availability varies by individual policy, Windows release, processor architecture, hardware, and child executable. windows-spawn does not weaken a requested policy. Unsupported policies return the process-creation error.

Implementations

impl MitigationPolicy

pub const fn new() -> Self

Creates a policy which defers every field.

pub const fn words(self) -> [u64; 2]

Returns the encoded words for diagnostics.

pub const fn dep(self, enable: bool) -> Self

Enables or removes the legacy DEP-enable bit.

pub const fn dep_atl_thunk(self, enable: bool) -> Self

Enables or removes the legacy DEP ATL-thunk-emulation bit.

pub const fn sehop(self, enable: bool) -> Self

Enables or removes the legacy SEHOP bit.

pub const fn relocate_images(self, value: RelocateImages) -> Self

Sets mandatory image relocation.

pub const fn heap_terminate(self, value: Mitigation) -> Self

Sets heap termination on corruption.

pub const fn bottom_up_aslr(self, value: Mitigation) -> Self

Sets bottom-up ASLR.

pub const fn high_entropy_aslr(self, value: Mitigation) -> Self

Sets high-entropy ASLR.

pub const fn strict_handle_checks(self, value: Mitigation) -> Self

Sets strict invalid-handle checking.

pub const fn disable_win32k_system_calls(self, value: Mitigation) -> Self

Sets the Win32k system-call-disable mitigation.

pub const fn disable_extension_points(self, value: Mitigation) -> Self

Sets extension-point disabling.

pub const fn dynamic_code(self, value: DynamicCode) -> Self

Sets dynamic-code policy.

pub const fn control_flow_guard(self, value: ControlFlowGuard) -> Self

Sets Control Flow Guard policy.

pub const fn signed_binaries(self, value: SignedBinaries) -> Self

Sets signed-binary loading policy.

pub const fn font_disable(self, value: FontDisable) -> Self

Sets non-system-font policy.

pub const fn block_remote_images(self, value: Mitigation) -> Self

Sets remote-image blocking.

pub const fn block_low_label_images(self, value: Mitigation) -> Self

Sets low-integrity-label image blocking.

pub const fn prefer_system32_images(self, value: Mitigation) -> Self

Sets System32 image preference.

pub const fn loader_integrity(self, value: LoaderIntegrity) -> Self

Sets loader integrity continuity.

pub const fn strict_control_flow_guard(self, value: Mitigation) -> Self

Sets strict Control Flow Guard.

pub const fn module_tampering(self, value: ModuleTampering) -> Self

Sets module-tampering protection.

pub const fn restrict_indirect_branch_prediction( self, value: Mitigation, ) -> Self

Sets restricted indirect branch prediction.

pub const fn allow_downgrade_dynamic_code(self, value: Mitigation) -> Self

Sets permission for a broker to downgrade dynamic-code policy.

pub const fn disable_speculative_store_bypass(self, value: Mitigation) -> Self

Sets speculative-store-bypass disabling.

pub const fn cet_user_shadow_stacks(self, value: CetShadowStacks) -> Self

Sets CET user shadow stacks.

pub const fn user_cet_context_ip_validation( self, value: UserCetContextIpValidation, ) -> Self

Sets CET set-context instruction-pointer validation.

pub const fn block_non_cet_binaries(self, value: BlockNonCetBinaries) -> Self

Sets blocking of binaries without CET metadata.

pub const fn extended_control_flow_guard(self, value: Mitigation) -> Self

Sets extended Control Flow Guard.

pub const fn pointer_authentication(self, value: Mitigation) -> Self

Sets ARM64 user-mode instruction-pointer authentication.

pub const fn cet_dynamic_apis_out_of_process(self, value: Mitigation) -> Self

Sets CET dynamic APIs to out-of-process-only mode.

pub const fn restrict_core_sharing(self, value: Mitigation) -> Self

Sets restricted CPU-core sharing.

pub const fn disable_fsctl_system_calls(self, value: Mitigation) -> Self

Sets FSCTL system-call disabling.

Trait Implementations

impl Clone for MitigationPolicy

fn clone(&self) -> MitigationPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for MitigationPolicy

impl Debug for MitigationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for MitigationPolicy

fn default() -> MitigationPolicy

Returns the “default value” for a type.

impl Eq for MitigationPolicy

impl Hash for MitigationPolicy

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for MitigationPolicy

fn eq(&self, other: &MitigationPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for MitigationPolicy