Add a macutil for the main app bundle and override...

chrome/renderer/renderer_main_platform_delegate_mac.mm

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/renderer_main_platform_delegate.h"
 
 #include "base/debug_util.h"
 
 #import <Foundation/Foundation.h>
 #import <ApplicationServices/ApplicationServices.h>
 #import <Cocoa/Cocoa.h>
 extern "C" {
 #include <sandbox.h>
 }
 
 #include "base/sys_info.h"
+#include "base/mac_util.h"
 #include "chrome/common/chrome_switches.h"
 #include "third_party/WebKit/WebKit/mac/WebCoreSupport/WebSystemInterface.h"
 
 RendererMainPlatformDelegate::RendererMainPlatformDelegate(
     const MainFunctionParams& parameters)
         : parameters_(parameters) {
 }
 
 RendererMainPlatformDelegate::~RendererMainPlatformDelegate() {
 }
@@ skipping 64 matching lines @@
   // This call doesn't work when the sandbox is enabled, the implementation
   // caches it's return value so we call it here and then future calls will
   // succeed.
   DebugUtil::BeingDebugged();
 
   // Cache the System info information, since we can't query certain attributes
   // with the Sandbox enabled.
   base::SysInfo::CacheSysInfo();
 
   // For the renderer, we give it a custom sandbox to lock down as tight as
-  // possible, but still be able to draw.  If we're not a renderer process, it
-  // usually means we're a unittest, so we use a pure compute sandbox instead.
+  // possible, but still be able to draw.
 
-  const char *sandbox_profile = kSBXProfilePureComputation;
-  uint64_t sandbox_flags = SANDBOX_NAMED;
-
-  if (parameters_.sandbox_info_.ProcessType() == switches::kRendererProcess) {
-    NSString* sandbox_profile_path =
-        [[NSBundle mainBundle] pathForResource:@"renderer" ofType:@"sb"];
-    BOOL is_dir = NO;
-    if (![[NSFileManager defaultManager] fileExistsAtPath:sandbox_profile_path
-                                              isDirectory:&is_dir] || is_dir) {
-      LOG(ERROR) << "Failed to find the sandbox profile on disk";
-      return false;
-    }
-    sandbox_profile = [sandbox_profile_path fileSystemRepresentation];
-    sandbox_flags = SANDBOX_NAMED_EXTERNAL;
+  NSString* sandbox_profile_path =
+      [mac_util::MainAppBundle() pathForResource:@"renderer" ofType:@"sb"];
+  BOOL is_dir = NO;
+  if (![[NSFileManager defaultManager] fileExistsAtPath:sandbox_profile_path
+                                            isDirectory:&is_dir] || is_dir) {
+    LOG(ERROR) << "Failed to find the sandbox profile on disk";
+    return false;
   }
 
+  const char *sandbox_profile = [sandbox_profile_path fileSystemRepresentation];
   char* error_buff = NULL;
-  int error = sandbox_init(sandbox_profile, sandbox_flags,
+  int error = sandbox_init(sandbox_profile, SANDBOX_NAMED_EXTERNAL,
                            &error_buff);
   bool success = (error == 0 && error_buff == NULL);
   if (error == -1) {
     LOG(ERROR) << "Failed to Initialize Sandbox: " << error_buff;
   }
   sandbox_free_error(error_buff);
   return success;
 }
 
 void RendererMainPlatformDelegate::RunSandboxTests() {
   // TODO(port): Run sandbox unit test here.
 }