Sandbox Worker process on the Mac.

chrome/browser/utility_process_host.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/utility_process_host.h"
 
 #include "app/app_switches.h"
 #include "app/l10n_util.h"
 #include "base/command_line.h"
 #include "base/file_util.h"
@@ skipping 49 matching lines @@
   Send(new UtilityMsg_ParseUpdateManifest(xml));
   return true;
 }
 
 FilePath UtilityProcessHost::GetUtilityProcessCmd() {
   return GetChildPath();
 }
 
 bool UtilityProcessHost::StartProcess(const FilePath& exposed_dir) {
 #if defined(OS_POSIX)
-  // TODO(port): We should not reach here on linux (crbug.com/22703) or
-  // MacOS (crbug.com/8102) until problems related to autoupdate are fixed.
+  // TODO(port): We should not reach here on Linux (crbug.com/22703).
+  // (crbug.com/23837) covers enabling this on Linux/OS X.
   NOTREACHED();
   return false;
 #endif
 
   // Name must be set or metrics_service will crash in any test which
   // launches a UtilityProcessHost.
   set_name(L"utility process");
 
   if (!CreateChannel())
     return false;
@@ skipping 19 matching lines @@
 #if defined(OS_WIN)
   if (!UseSandbox()) {
     // Don't use the sandbox during unit tests.
     base::LaunchApp(cmd_line, false, false, &process);
   } else if (exposed_dir.empty()) {
     process = sandbox::StartProcess(&cmd_line);
   } else {
     process = sandbox::StartProcessWithAccess(&cmd_line, exposed_dir);
   }
 #else
-  // TODO(port): Sandbox this on Linux/Mac.  Also, zygote this to work with
+  // TODO(port): Sandbox this on Linux.  Also, zygote this to work with
   // Linux updating.
   const CommandLine& browser_command_line = *CommandLine::ForCurrentProcess();
   bool has_cmd_prefix = browser_command_line.HasSwitch(
       switches::kUtilityCmdPrefix);
   if (has_cmd_prefix) {
     // launch the utility child process with some prefix (usually "xterm -e gdb
     // --args").
     cmd_line.PrependWrapper(browser_command_line.GetSwitchValue(
         switches::kUtilityCmdPrefix));
   }
 
+  cmd_line.AppendSwitchWithValue(switches::kUtilityProcessAllowedDir,
+                                 exposed_dir.value().c_str());
+
   // This code is duplicated with browser_render_process_host.cc and
   // plugin_process_host.cc, but there's not a good place to de-duplicate it.
   // Maybe we can merge this into sandbox::StartProcess which will set up
   // everything before calling LaunchApp?
   base::file_handle_mapping_vector fds_to_map;
   const int ipcfd = channel().GetClientFileDescriptor();
   if (ipcfd > -1)
     fds_to_map.push_back(std::pair<int, int>(
         ipcfd, kPrimaryIPCChannel + base::GlobalDescriptors::kBaseDescriptor));
   base::LaunchApp(cmd_line.argv(), fds_to_map, false, &process);
@@ skipping 31 matching lines @@
     IPC_MESSAGE_HANDLER(UtilityHostMsg_UnpackWebResource_Succeeded,
                         Client::OnUnpackWebResourceSucceeded)
     IPC_MESSAGE_HANDLER(UtilityHostMsg_UnpackWebResource_Failed,
                         Client::OnUnpackWebResourceFailed)
     IPC_MESSAGE_HANDLER(UtilityHostMsg_ParseUpdateManifest_Succeeded,
                         Client::OnParseUpdateManifestSucceeded)
     IPC_MESSAGE_HANDLER(UtilityHostMsg_ParseUpdateManifest_Failed,
                         Client::OnParseUpdateManifestFailed)
   IPC_END_MESSAGE_MAP_EX()
 }