Fully remove the hole in the Mac Sandbox that was used to support...

chrome/common/sandbox_init_wrapper_mac.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/sandbox_init_wrapper.h"
 
 #include "base/command_line.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/sandbox_mac.h"
 
 bool SandboxInitWrapper::InitializeSandbox(const CommandLine& command_line,
                                            const std::string& process_type) {
   if (command_line.HasSwitch(switches::kNoSandbox))
     return true;
 
   sandbox::SandboxProcessType sandbox_process_type;
   FilePath allowed_dir;  // Empty by default.
 
   if (process_type.empty()) {
     // Browser process isn't sandboxed.
     return true;
   } else if (process_type == switches::kRendererProcess) {
     if (command_line.HasSwitch(switches::kEnableExperimentalWebGL) &&
         command_line.HasSwitch(switches::kInProcessWebGL)) {
       // TODO(kbr): this check seems to be necessary only on this
       // platform because the sandbox is initialized later. Remove
       // this once this flag is removed.
       return true;
-    } else if (command_line.HasSwitch(switches::kInternalNaCl)) {
-      // Renderer process sandbox. If --internal_nacl is present then use the
-      // version of the renderer sandbox which allows Native Client to use Unix
-      // sockets.
-      // TODO(msneck): Remove the use of Unix sockets from Native Client and
-      // then get rid of the SANDBOX_TYPE_NACL_PLUGIN enum.
-      // See http://code.google.com/p/nativeclient/issues/detail?id=344
-      sandbox_process_type = sandbox::SANDBOX_TYPE_NACL_PLUGIN;
     } else {
       sandbox_process_type = sandbox::SANDBOX_TYPE_RENDERER;
     }
   } else if (process_type == switches::kExtensionProcess) {
     // Extension processes are just renderers [they use RenderMain()] with a
     // different set of command line flags.
     // If we ever get here it means something has changed in regards
     // to the extension process mechanics and we should probably reexamine
     // how we sandbox extension processes since they are no longer identical
     // to renderers.
@@ skipping 21 matching lines @@
     NOTREACHED();
     return true;
   }
 
   // Warm up APIs before turning on the sandbox.
   sandbox::SandboxWarmup();
 
   // Actually sandbox the process.
   return sandbox::EnableSandbox(sandbox_process_type, allowed_dir);
 }