Index: content/common/sandbox_win.cc |
diff --git a/content/common/sandbox_win.cc b/content/common/sandbox_win.cc |
index 8f76710bc8d36685efbf1e691941fae03b55dfc7..6db4759d52e73d88d5d5849bfd774688c0f0eafc 100644 |
--- a/content/common/sandbox_win.cc |
+++ b/content/common/sandbox_win.cc |
@@ -575,6 +575,17 @@ void AddBaseHandleClosePolicy(sandbox::TargetPolicy* policy) { |
policy->AddKernelObjectToClose(L"Section", object_path.data()); |
} |
+void AddAppContainerPolicy(sandbox::TargetPolicy* policy, const wchar_t* sid) { |
+ if (base::win::GetVersion() == base::win::VERSION_WIN8 || |
+ base::win::GetVersion() == base::win::VERSION_WIN8_1) { |
+ const base::CommandLine& command_line = |
+ *base::CommandLine::ForCurrentProcess(); |
+ if (!command_line.HasSwitch(switches::kDisableAppContainer)) { |
+ policy->SetLowBox(sid); |
+ } |
+ } |
+} |
+ |
bool InitBrokerServices(sandbox::BrokerServices* broker_services) { |
// TODO(abarth): DCHECK(CalledOnValidThread()); |
// See <http://b/1287166>. |