Load additional NSS library files in zygote main if remoting is enabled

base/nss_util.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef BASE_NSS_UTIL_H_
 #define BASE_NSS_UTIL_H_
 #pragma once
 
 #include "base/basictypes.h"
 
@@ skipping 47 matching lines @@
 // NSS checks whether it is running a forked process to avoid problems when
 // using user security modules in a forked process.  However if we are sure
 // there are no modules loaded before the process is forked then there is no
 // harm disabling the check.
 //
 // This method must be called before EnsureNSSInit() to take effect.
 //
 // WARNING: Use this with caution.
 void DisableNSSForkCheck();
 
+// Load NSS library files. This function only has effect on Linux.

[wtc, 2011/03/17 20:03:55]

Nit: since NSS is also used on FreeBSD, etc., it would be
better to say "Unix" instead of "Linux", or you can say
"This function has no effect on Mac and Windows."

You should document the purpose for this function
(to allow NSS to be initialized after we turn off a
process's ability to load libraries such as in a sandbox).

You should also point out that this function does not
preload libnssckbi.so (the built-in root certificates),
which is also an NSS library.

[Alpha Left Google, 2011/03/17 22:31:34]

Done.

+void LoadNSSLibraries();
+
 // Check if the current NSS version is greater than or equals to |version|.
 // A sample version string is "3.12.3".
 bool CheckNSSVersion(const char* version);
 
 #if defined(OS_CHROMEOS)
 // Open the r/w nssdb that's stored inside the user's encrypted home directory.
 void OpenPersistentNSSDB();
 #endif
 
 // Convert a NSS PRTime value into a base::Time object.
@@ skipping 26 matching lines @@
  private:
   Lock *lock_;
   DISALLOW_COPY_AND_ASSIGN(AutoNSSWriteLock);
 };
 
 #endif  // defined(USE_NSS)
 
 }  // namespace base
 
 #endif  // BASE_NSS_UTIL_H_