Disable ALPC closing for now.

content/common/sandbox_policy.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_policy.h"
 
 #include <string>
 
 #include "base/command_line.h"
 #include "base/debug/debugger.h"
@@ skipping 205 matching lines @@
   return *session_prefix + object;
 }
 
 // Closes handles that are opened at process creation and initialization.
 void AddBaseHandleClosePolicy(sandbox::TargetPolicy* policy) {
   // Being able to manipulate anything BaseNamedObjects is bad.
   policy->AddKernelObjectToClose(L"Directory", PrependWindowsSessionPath(
       L"\\BaseNamedObjects").data());
   policy->AddKernelObjectToClose(L"Section", PrependWindowsSessionPath(
       L"\\BaseNamedObjects\\windows_shell_global_counters").data());
-  // These are the CSRSS and LSASS handles opened at initialization.
-  policy->AddKernelObjectToClose(L"ALPC Port", NULL);
 }
 
 // Adds the generic policy rules to a sandbox TargetPolicy.
 bool AddGenericPolicy(sandbox::TargetPolicy* policy) {
   sandbox::ResultCode result;
 
   // Add the policy for the pipes
   result = policy->AddRule(sandbox::TargetPolicy::SUBSYS_FILES,
                            sandbox::TargetPolicy::FILES_ALLOW_ANY,
                            L"\\??\\pipe\\chrome.*");
@@ skipping 267 matching lines @@
 
   // Help the process a little. It can't start the debugger by itself if
   // the process is in a sandbox.
   if (child_needs_help)
     base::debug::SpawnDebuggerOnProcess(target.dwProcessId);
 
   return process;
 }
 
 }  // namespace sandbox