Split GpuProcessHost into GpuProcessHostUIShim, which runs on the UI...

chrome/common/sandbox_policy.cc

 // Copyright (c) 2006-2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/sandbox_policy.h"
 
 #include "app/win_util.h"
 #include "base/command_line.h"
 #include "base/debug_util.h"
 #include "base/file_util.h"
@@ skipping 403 matching lines @@
     type = ChildProcessInfo::GPU_PROCESS;
   } else {
     NOTREACHED();
     return 0;
   }
 
   bool in_sandbox =
       (type != ChildProcessInfo::NACL_BROKER_PROCESS) &&
       !browser_command_line.HasSwitch(switches::kNoSandbox) &&
       (type != ChildProcessInfo::PLUGIN_PROCESS ||
-       browser_command_line.HasSwitch(switches::kSafePlugins));
+       browser_command_line.HasSwitch(switches::kSafePlugins)) &&
+      (type != ChildProcessInfo::GPU_PROCESS);
 #if !defined (GOOGLE_CHROME_BUILD)
   if (browser_command_line.HasSwitch(switches::kInProcessPlugins)) {
     // In process plugins won't work if the sandbox is enabled.
     in_sandbox = false;
   }
 #endif
 
   // Propagate the Chrome Frame flag to sandboxed processes if present.
   if (browser_command_line.HasSwitch(switches::kChromeFrame)) {
     if (!cmd_line->HasSwitch(switches::kChromeFrame)) {
@@ skipping 65 matching lines @@
 
   // Help the process a little. It can't start the debugger by itself if
   // the process is in a sandbox.
   if (child_needs_help)
     DebugUtil::SpawnDebuggerOnProcess(target.dwProcessId);
 
   return process;
 }
 
 } // namespace sandbox