util/winutil: add constants from Win32 SDK for dll blocking mitigatio…

…n policies Fixes tailscale#13182 Signed-off-by: Aaron Klotz <aaron@tailscale.com>
nshalman · Aug 19, 2024 · f95785f · f95785f
1 parent 8fad8c4
commit f95785f
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/util/winutil/startupinfo_windows.go b/util/winutil/startupinfo_windows.go
@@ -35,9 +35,11 @@ const (
 
 // Mitigation flags from the Win32 SDK
 const (
-	PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_NO_REMOTE_ALWAYS_ON       = (1 << 52)
-	PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_NO_LOW_LABEL_ALWAYS_ON    = (1 << 56)
-	PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_PREFER_SYSTEM32_ALWAYS_ON = (1 << 60)
+	PROCESS_CREATION_MITIGATION_POLICY_EXTENSION_POINT_DISABLE_ALWAYS_ON      = (1 << 32)
+	PROCESS_CREATION_MITIGATION_POLICY_BLOCK_NON_MICROSOFT_BINARIES_ALWAYS_ON = (1 << 44)
+	PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_NO_REMOTE_ALWAYS_ON         = (1 << 52)
+	PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_NO_LOW_LABEL_ALWAYS_ON      = (1 << 56)
+	PROCESS_CREATION_MITIGATION_POLICY_IMAGE_LOAD_PREFER_SYSTEM32_ALWAYS_ON   = (1 << 60)
 )
 
 // StartupInfoBuilder constructs a Windows STARTUPINFOEX and optional