Recommit - r52326 - Mac: Use canonicalization rather than absolute paths for sandbox.

chrome/common/sandbox_mac.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_COMMON_SANDBOX_MAC_H_
 #define CHROME_COMMON_SANDBOX_MAC_H_
 
 #include "base/file_path.h"
 
 namespace sandbox {
@@ skipping 32 matching lines @@
 // profile that supports this is SANDBOX_TYPE_UTILITY .
 //
 // |allowed_dir| must be a "simple" string since it's placed as is in a regex
 // i.e. it must not contain quotation characters, escaping or any characters
 // that might have special meaning when blindly substituted into a regular
 // expression - crbug.com/26492 .
 // Returns true on success, false if an error occurred enabling the sandbox.
 bool EnableSandbox(SandboxProcessType sandbox_type,
                    const FilePath& allowed_dir);
 
+// Convert provided path into a "canonical" path matching what the Sandbox
+// expects i.e. one without symlinks.
+// This path is not necessarily unique e.g. in the face of hardlinks.
+void GetCanonicalSandboxPath(FilePath* path);
+
 }  // namespace sandbox
 
 #endif  // CHROME_COMMON_SANDBOX_MAC_H_