Mac: Tell the GPU sandbox to deny a few things.

chrome/common/sandbox_mac_unittest_helper.mm

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/sandbox_mac_unittest_helper.h"
 
 extern "C" {
 #include <sandbox.h>
 }
 
@@ skipping 40 matching lines @@
 }  // namespace internal
 
 bool MacSandboxTest::RunTestInAllSandboxTypes(const char* test_name,
                                               const char* test_data) {
   // Go through all the sandbox types, and run the test case in each of them
   // if one fails, abort.
   for(int i = static_cast<int>(Sandbox::SANDBOX_TYPE_FIRST_TYPE);
       i < Sandbox::SANDBOX_AFTER_TYPE_LAST_TYPE;
       ++i) {
 
-    if (i == Sandbox::SANDBOX_TYPE_GPU) {
-      // TODO(thakis): Remove this once the gpu sandbox is more restricted.
-      // http://crbug.com/48607
-      continue;
-    }
-
     if (!RunTestInSandbox(static_cast<Sandbox::SandboxProcessType>(i),
             test_name, test_data)) {
       LOG(ERROR) << "Sandboxed test (" << test_name << ")" <<
           "Failed in sandbox type " << i <<
           "user data: (" << test_data << ")";
       return false;
     }
   }
  return true;
 }
@@ skipping 66 matching lines @@
     return -1;
   }
   test_case->SetTestData(test_data);
 
   // Run Test.
   if (!test_case->BeforeSandboxInit()) {
     LOG(ERROR) << sandbox_test_name << "Failed test before sandbox init";
     return -1;
   }
 
-  Sandbox::SandboxWarmup();
+  Sandbox::SandboxWarmup(sandbox_type);
 
   if (!Sandbox::EnableSandbox(sandbox_type, FilePath())) {
     LOG(ERROR) << "Failed to initialize sandbox " << sandbox_type;
     return -1;
   }
 
   if (!test_case->SandboxedTest()) {
     LOG(ERROR) << sandbox_test_name << "Failed sandboxed test";
     return -1;
   }
 
   return 0;
 }
 
 }  // namespace