Verify the signature on user cloud policy downloads.

chrome/browser/policy/browser_policy_connector.h

Index: chrome/browser/policy/browser_policy_connector.h
diff --git a/chrome/browser/policy/browser_policy_connector.h b/chrome/browser/policy/browser_policy_connector.h
index 8a95e429b786a791dd2b188bed8eb23794c125fc..20f8b07bca7385dbf273022cf629746c13457d10 100644
--- a/chrome/browser/policy/browser_policy_connector.h
+++ b/chrome/browser/policy/browser_policy_connector.h
@@ -8,6 +8,7 @@
 #include <string>
 
 #include "base/basictypes.h"
+#include "base/file_path.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/memory/weak_ptr.h"
 #include "chrome/browser/policy/cloud_policy_constants.h"
@@ -124,6 +125,10 @@ class BrowserPolicyConnector {
   }
 #endif
 
+  // Sets a root path override for tests. Absolute paths used to construct
+  // internal objects will be relative to |root_path|.
+  static void SetRootPathForTesting(const FilePath::CharType* root_path);

[Joao da Silva, 2013/02/06 00:34:38]

Better ideas welcome :-)

I don't totally dislike this, since BrowserPolicyConnector() creates a lot of
stuff and passes paths into constructors; this may be handy for more things in
the future.

[Mattias Nissler (ping if slow), 2013/02/06 17:58:25]

How about getting the path from PathService and installing an override in tests?
That's the canonical way of handling this situation in Chrome AFAICT.

[Joao da Silva, 2013/02/07 16:32:00]

Good idea, done.

+
   // Allows setting a DeviceManagementService (for injecting mocks in
   // unit tests).
   void SetDeviceManagementServiceForTesting(