Make sure only the main browser process and service proceses are allowed to create the profile dire…

chrome/common/chrome_paths_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_paths_internal.h"
 
 #include <windows.h>
 #include <knownfolders.h>
 #include <shellapi.h>
 #include <shlobj.h>
 #include <shobjidl.h>
 
 #include "base/file_path.h"
 #include "base/win/metro.h"
 #include "base/path_service.h"
 #include "base/win/scoped_co_mem.h"
 #include "chrome/common/chrome_constants.h"
 #include "chrome/installer/util/browser_distribution.h"
 
+namespace {
+// TODO(pastarmovj): Remove this copy of kServiceProcess once we get
+// better way to share constants between content and chrome. Using content
+// switches makes all hell break loose on us when linking.
+const char kServiceProcess[] = "service";
+}
+
 namespace chrome {
 
 bool GetDefaultUserDataDirectory(FilePath* result) {
   if (!PathService::Get(base::DIR_LOCAL_APP_DATA, result))
     return false;
   BrowserDistribution* dist = BrowserDistribution::GetDistribution();
   *result = result->Append(dist->GetInstallSubDir());
   if (base::win::GetMetroModule())
     *result = result->Append(kMetroChromeUserDataSubDir);
   *result = result->Append(chrome::kUserDataDirname);
@@ skipping 60 matching lines @@
   // so we don't bother handling it.
   wchar_t system_buffer[MAX_PATH];
   system_buffer[0] = 0;
   if (FAILED(SHGetFolderPath(NULL, CSIDL_DESKTOPDIRECTORY, NULL,
                              SHGFP_TYPE_CURRENT, system_buffer)))
     return false;
   *result = FilePath(system_buffer);
   return true;
 }
 
+bool ProcessNeedsProfileDir(const std::string& process_type) {
+  // On windows we don't want subprocesses other than the browser process and
+  // service processes to be able to use the profile directory because if it
+  // lies on a network share the sandbox will prevent us from accessing it.
+  return process_type.empty() || process_type == kServiceProcess;
+}
+
 }  // namespace chrome