Sandbox Worker process on the Mac.

chrome/common/chrome_switches.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_switches.h"
 
 #include "base/base_switches.h"
 
 namespace switches {
 
@@ skipping 579 matching lines @@
 const char kUserScriptsDir[]                = "user-scripts-dir";
 
 // On POSIX only: the contents of this flag are prepended to the utility
 // process command line. Useful values might be "valgrind" or "xterm -e gdb
 // --args".
 const char kUtilityCmdPrefix[]              = "utility-cmd-prefix";
 
 // Causes the process to run as a utility subprocess.
 const char kUtilityProcess[]                = "utility";
 
+// The utility process is sandboxed, with access to one directory. This flag
+// specifies the directory that can be accessed.
+const char kUtilityProcessAllowedDir[]      = "utility-allowed-dir";
+
 // Will add kWaitForDebugger to every child processes. If a value is passed, it
 // will be used as a filter to determine if the child process should have the
 // kWaitForDebugger flag passed on or not.
 const char kWaitForDebuggerChildren[]       = "wait-for-debugger-children";
 
 // Causes the worker process allocation to use as many processes as cores.
 const char kWebWorkerProcessPerCore[]       = "web-worker-process-per-core";
 
 // Causes workers to run together in one process, depending on their domains.
 // Note this is duplicated in webworkerclient_impl.cc
@@ skipping 63 matching lines @@
 //
 // You were going to just dump your switches here, weren't you? Instead,
 // please put them in alphabetical order above, or in order inside the
 // appropriate ifdef at the bottom. The order should match the header.
 // -----------------------------------------------------------------------------
 
 // Enable AutoFill++.
 const char kEnableNewAutoFill[] = "enable-new-autofill";
 
 }  // namespace switches