Mac: Sandbox GPU process.

chrome/common/sandbox_mac.mm

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/sandbox_mac.h"
 
 #include "base/debug_util.h"
 
 #import <Cocoa/Cocoa.h>
 extern "C" {
@@ skipping 296 matching lines @@
       sandbox_config_filename = @"worker";
       break;
     case Sandbox::SANDBOX_TYPE_UTILITY:
       sandbox_config_filename = @"utility";
       break;
     case Sandbox::SANDBOX_TYPE_NACL_LOADER:
       // The Native Client loader is used for safeguarding the user's
       // untrusted code within Native Client.
       sandbox_config_filename = @"nacl_loader";
       break;
+    case Sandbox::SANDBOX_TYPE_GPU:
+      sandbox_config_filename = @"gpu";
+      break;
     default:
       NOTREACHED();
       return nil;
   }
 
   // Read in the sandbox profile and the common prefix file.
   NSString* common_sandbox_prefix_path =
       [mac_util::MainAppBundle() pathForResource:@"common"
                                           ofType:@"sb"];
   NSString* common_sandbox_prefix_data =
@@ skipping 131 matching lines @@
       sandbox_data = [sandbox_data
           stringByReplacingOccurrencesOfString:@";ENABLE_DIRECTORY_ACCESS"
                                     withString:allowed_dir_sandbox_command];
     }
   }
 
   NSMutableArray* tokens_to_remove = [NSMutableArray array];
 
   // Enable verbose logging if enabled on the command line. (See common.sb
   // for details).
-  const CommandLine *command_line = CommandLine::ForCurrentProcess();
+  const CommandLine* command_line = CommandLine::ForCurrentProcess();
   bool enable_logging =
       command_line->HasSwitch(switches::kEnableSandboxLogging);;
   if (enable_logging) {
     [tokens_to_remove addObject:@";ENABLE_LOGGING"];
   }
 
   bool snow_leopard_or_higher;
   GetOSVersion(&snow_leopard_or_higher);
 
   // Without this, the sandbox will print a message to the system log every
@@ skipping 59 matching lines @@
   if (HANDLE_EINTR(fcntl(fd, F_GETPATH, canonical_path)) != 0) {
     PLOG(FATAL) << "GetCanonicalSandboxPath() failed for: "
                 << path->value();
     return;
   }
 
   *path = FilePath(canonical_path);
 }
 
 }  // namespace sandbox