Verify the signature on user cloud policy downloads.

chrome/browser/policy/browser_policy_connector.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_
 #define CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_
 
 #include <string>
 
 #include "base/basictypes.h"
+#include "base/file_path.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/memory/weak_ptr.h"
 #include "chrome/browser/policy/cloud_policy_constants.h"
 #include "chrome/browser/policy/configuration_policy_handler_list.h"
 #include "chrome/browser/policy/proxy_policy_provider.h"
 
 class PrefServiceSimple;
 class Profile;
 
 namespace policy {
@@ skipping 96 matching lines @@
     return user_cloud_policy_manager_.get();
   }
   DeviceLocalAccountPolicyService* GetDeviceLocalAccountPolicyService() {
     return device_local_account_policy_service_.get();
   }
   EnterpriseInstallAttributes* GetInstallAttributes() {
     return install_attributes_.get();
   }
 #endif
 
+  // Sets a root path override for tests. Absolute paths used to construct
+  // internal objects will be relative to |root_path|.
+  static void SetRootPathForTesting(const FilePath::CharType* root_path);

[Joao da Silva, 2013/02/06 00:34:38]

Better ideas welcome :-)

I don't totally dislike this, since BrowserPolicyConnector() creates a lot of
stuff and passes paths into constructors; this may be handy for more things in
the future.

[Mattias Nissler (ping if slow), 2013/02/06 17:58:25]

How about getting the path from PathService and installing an override in tests?
That's the canonical way of handling this situation in Chrome AFAICT.

[Joao da Silva, 2013/02/07 16:32:00]

Good idea, done.

+
   // Allows setting a DeviceManagementService (for injecting mocks in
   // unit tests).
   void SetDeviceManagementServiceForTesting(
       scoped_ptr<DeviceManagementService> service);
 
   // Sets a |provider| that will be included in PolicyServices returned by
   // CreatePolicyService. This is a static method because local state is
   // created immediately after the connector, and tests don't have a chance to
   // inject the provider otherwise. |provider| must outlive the connector, and
   // its ownership is not taken though the connector will initialize and shut it
@@ skipping 75 matching lines @@
   scoped_ptr<AppPackUpdater> app_pack_updater_;
   scoped_ptr<NetworkConfigurationUpdater> network_configuration_updater_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(BrowserPolicyConnector);
 };
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_