Convert plugin and GPU process to brokered handle duplication.

chrome/common/chrome_content_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_content_client.h"
 
 #include "base/command_line.h"
 #include "base/file_util.h"
 #include "base/path_service.h"
 #include "base/process_util.h"
@@ skipping 391 matching lines @@
   FilePath plugin_path(plugin_dll);
   if (plugin_path.BaseName() != builtin_flash.BaseName())
     return false;
 
   if (base::win::GetVersion() <= base::win::VERSION_XP ||
       CommandLine::ForCurrentProcess()->HasSwitch(
           switches::kDisableFlashSandbox)) {
     return false;
   }
 
+  // Add policy for proxy window pump.

[cpu_(ooo_6.6-7.5), 2012/04/11 23:12:49]

what is what are we allowing to dup here? "window pump" conjures the idea of
window handles but that cannot be the case..

[jschuh, 2012/04/11 23:52:32]

It's very confusing, but it's explained here in 
WebPluginDelegateProxy::HandleInputEvent():
http://code.google.com/searchframe#OAMlx_jo-ck/src/content/renderer/webplugin...

+  if (policy->AddRule(sandbox::TargetPolicy::SUBSYS_HANDLES,
+                      sandbox::TargetPolicy::HANDLES_DUP_ANY,
+                      L"Event") != sandbox::SBOX_ALL_OK) {
+    NOTREACHED();
+    return false;
+  }
+
   // Add the policy for the pipes.
   if (policy->AddRule(sandbox::TargetPolicy::SUBSYS_NAMED_PIPES,
                       sandbox::TargetPolicy::NAMEDPIPES_ALLOW_ANY,
                       L"\\\\.\\pipe\\chrome.*") != sandbox::SBOX_ALL_OK) {
     NOTREACHED();
     return false;
   }
 
   // Spawn the flash broker and apply sandbox policy.
   if (LoadFlashBroker(plugin_path, command_line)) {
@@ skipping 29 matching lines @@
   DCHECK(sandbox_profile_resource_id);
   if (sandbox_type == CHROME_SANDBOX_TYPE_NACL_LOADER) {
     *sandbox_profile_resource_id = IDR_NACL_SANDBOX_PROFILE;
     return true;
   }
   return false;
 }
 #endif
 
 }  // namespace chrome