Sandbox Worker process on the Mac.

chrome/app/chrome_dll_main.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // TODO(port): the ifdefs in here are a first step towards trying to determine
 // the correct abstraction for all the OS functionality required at this
 // stage of process initialization. It should not be taken as a final
 // abstraction.
 
 #include "build/build_config.h"
@@ skipping 464 matching lines @@
   if (parsed_command_line.HasSwitch(switches::kMessageLoopHistogrammer))
     MessageLoop::EnableHistogrammer(true);
 
   // Checks if the sandbox is enabled in this process and initializes it if this
   // is the case. The crash handler depends on this so it has to be done before
   // its initialization.
   SandboxInitWrapper sandbox_wrapper;
 #if defined(OS_WIN)
   sandbox_wrapper.SetServices(sandbox_info);
 #endif
+#if defined (OS_MACOSX)
+  // On OS X the renderer sandbox needs to be initialized later in the startup
+  // sequence in RendererMainPlatformDelegate::PlatformInitialize().
+  if (process_type != switches::kRendererProcess)
+    sandbox_wrapper.InitializeSandbox(parsed_command_line, process_type);
+#else
   sandbox_wrapper.InitializeSandbox(parsed_command_line, process_type);
+#endif  // !OS_MACOSX
 
 #if defined(OS_WIN)
   _Module.Init(NULL, instance);
 #endif
 
   // Notice a user data directory override if any
   const FilePath user_data_dir = FilePath::FromWStringHack(
       parsed_command_line.GetSwitchValue(switches::kUserDataDir));
   if (!user_data_dir.empty())
     CHECK(PathService::Override(chrome::DIR_USER_DATA, user_data_dir));
@@ skipping 144 matching lines @@
 
   logging::CleanupChromeLogging();
 
 #if defined(OS_MACOSX) && defined(GOOGLE_CHROME_BUILD)
   // TODO(mark): See the TODO(mark) above at InitCrashReporter.
   DestructCrashReporter();
 #endif  // OS_MACOSX && GOOGLE_CHROME_BUILD
 
   return rv;
 }