Add support for alternate window station.

sandbox/src/sandbox_policy.h

Index: sandbox/src/sandbox_policy.h
===================================================================
--- sandbox/src/sandbox_policy.h	(revision 16307)
+++ sandbox/src/sandbox_policy.h	(working copy)
@@ -1,10 +1,12 @@
-// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
+// Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_SRC_SANDBOX_POLICY_H_
 #define SANDBOX_SRC_SANDBOX_POLICY_H_
 
+#include <string>
+
 #include "base/basictypes.h"
 #include "sandbox/src/sandbox_types.h"
 #include "sandbox/src/security_level.h"
@@ -80,9 +82,21 @@
   virtual ResultCode SetJobLevel(JobLevel job_level, uint32 ui_exceptions) = 0;
 
   // Specifies the desktop on which the application is going to run. If the
-  // desktop does not exist, it will be created.
-  virtual ResultCode SetDesktop(const wchar_t* desktop) = 0;
+  // desktop does not exist, it will be created. If alternate_winstation is
+  // set to true, the desktop will be created on an alternate window station.
+  virtual ResultCode SetAlternateDesktop(bool alternate_winstation) = 0;
 
+  // Returns the name of the alternate desktop used. If an alternate window
+  // station is specified, the name is prepended by the window station name,
+  // followed by a backslash.
+  virtual std::wstring GetAlternateDesktop() const = 0;
+
+  // Precreates the desktop and window station, if any.
+  virtual ResultCode CreateAlternateDesktop(bool alternate_winstation) = 0;
+
+  // Destroys the desktop and windows station.
+  virtual void DestroyAlternateDesktop() = 0;
+
   // Sets the integrity level of the process in the sandbox. The integrity level
   // will not take effect before you call LowerToken. User Interface Privilege
   // Isolation is not affected by this setting and will remain off for the