Merge M43: Enable appcontainer on M43

content/browser/renderer_host/render_process_host_impl.cc

Index: content/browser/renderer_host/render_process_host_impl.cc
diff --git a/content/browser/renderer_host/render_process_host_impl.cc b/content/browser/renderer_host/render_process_host_impl.cc
index 91dd8b3c4c73b805c4b63dcf2de938b1558bde90..d18dcd389b433f916c920aa737311056c12dc58b 100644
--- a/content/browser/renderer_host/render_process_host_impl.cc
+++ b/content/browser/renderer_host/render_process_host_impl.cc
@@ -335,6 +335,20 @@ class RendererSandboxedProcessLauncherDelegate
                               bool* success) {
     AddBaseHandleClosePolicy(policy);
 
+    if (base::win::GetVersion() == base::win::VERSION_WIN8 ||
+        base::win::GetVersion() == base::win::VERSION_WIN8_1) {
+      // TODO(shrikant): Check if these constants should be different across
+      // various versions of Chromium code base or could be same.
+      // If there should be different SID per channel then move this code
+      // in chrome rather than content and assign SID based on
+      // VersionInfo::GetChannel().
+      const wchar_t kAppContainerSid[] =
+          L"S-1-15-2-3251537155-1984446955-2931258699-841473695-1938553385-"
+          L"924012148-129201922";
+
+      policy->SetLowBox(kAppContainerSid);
+    }
+
     GetContentClient()->browser()->PreSpawnRenderer(policy, success);
   }