Mac: Infrastructure for serialization of OS fonts over IPC.

chrome/common/sandbox_mac_diraccess_unittest.mm

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import <Cocoa/Cocoa.h>
 #include <dirent.h>
 
 extern "C" {
 #include <sandbox.h>
 }
 
 #include "base/file_util.h"
 #include "base/file_path.h"
 #include "base/multiprocess_test.h"
 #include "base/sys_string_conversions.h"
 #include "base/utf_string_conversions.h"
 #include "chrome/common/sandbox_mac.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
+// Tests to exercise directory-access-related restrictions of Mac sandbox.
+
 namespace sandbox {
 
 bool QuotePlainString(const std::string& str_utf8, std::string* dst);
 bool QuoteStringForRegex(const std::string& str_utf8, std::string* dst);
 
 }  // namespace sandbox
 
+namespace {
+
 static const char* kSandboxAccessPathKey = "sandbox_dir";
 
 class MacDirAccessSandboxTest : public MultiProcessTest {
  public:
   bool CheckSandbox(std::string directory_to_try) {
     setenv(kSandboxAccessPathKey, directory_to_try.c_str(), 1);
     base::ProcessHandle child_process = SpawnChild(L"mac_sandbox_path_access");
     int code = -1;
     if (!base::WaitForExitCode(child_process, &code)) {
       LOG(WARNING) << "base::WaitForExitCode failed";
@@ skipping 198 matching lines @@
 
   if (open(denied_file2.value().c_str(), O_WRONLY | O_CREAT) > 0) {
     PLOG(ERROR) << "Sandbox breach: was able to write ("
                 << denied_file2.value()
                 << ")";
     return -1;
   }
 
   return 0;
 }
+
+}  // namespace