Pass the client end handle of the network-to-daemon IPC channel via handle inheritance.

remoting/host/daemon_process_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "remoting/host/daemon_process.h"
 
 #include "base/base_switches.h"
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/logging.h"
@@ skipping 11 matching lines @@
 #include "remoting/host/win/worker_process_launcher.h"
 
 using base::win::ScopedHandle;
 using base::TimeDelta;
 
 namespace {
 
 const FilePath::CharType kMe2meHostBinaryName[] =
     FILE_PATH_LITERAL("remoting_host.exe");
 
-// The security descriptor of the daemon IPC endpoint. It gives full access
-// to LocalSystem and denies access by anyone else.
-const char kDaemonPipeSecurityDescriptor[] = "O:SYG:SYD:(A;;GA;;;SY)";
-
 } // namespace
 
 namespace remoting {
 
 class DaemonProcessWin : public DaemonProcess {
  public:
   DaemonProcessWin(scoped_refptr<base::SingleThreadTaskRunner> main_task_runner,
                    scoped_refptr<base::SingleThreadTaskRunner> io_task_runner,
                    const base::Closure& stopped_callback);
   virtual ~DaemonProcessWin();
@@ skipping 37 matching lines @@
   FilePath dir_path;
   if (!PathService::Get(base::DIR_EXE, &dir_path)) {
     LOG(ERROR) << "Failed to get the executable file name.";
     Stop();
     return;
   }
 
   scoped_ptr<UnprivilegedProcessDelegate> delegate(
       new UnprivilegedProcessDelegate(main_task_runner(), io_task_runner(),
                                       dir_path.Append(kMe2meHostBinaryName)));
-  launcher_.reset(new WorkerProcessLauncher(main_task_runner(),
-                                            io_task_runner(),
-                                            delegate.Pass(),
-                                            this,
-                                            kDaemonPipeSecurityDescriptor));
+  launcher_.reset(new WorkerProcessLauncher(
+      main_task_runner(), delegate.Pass(), this));
 }
 
 void DaemonProcessWin::Send(IPC::Message* message) {
   if (launcher_.get() != NULL) {
     launcher_->Send(message);
   } else {
     delete message;
   }
 }
 
 void DaemonProcessWin::DoStop() {
   DCHECK(main_task_runner()->BelongsToCurrentThread());
 
   launcher_.reset();
   DaemonProcess::DoStop();
 }
 
 scoped_ptr<DaemonProcess> DaemonProcess::Create(
     scoped_refptr<base::SingleThreadTaskRunner> main_task_runner,
     scoped_refptr<base::SingleThreadTaskRunner> io_task_runner,
     const base::Closure& stopped_callback) {
   scoped_ptr<DaemonProcessWin> daemon_process(
       new DaemonProcessWin(main_task_runner, io_task_runner, stopped_callback));
   return daemon_process.PassAs<DaemonProcess>();
 }
 
 }  // namespace remoting