Remove mention of the nacl process in content.

content/public/common/sandbox_init.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #define CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 
+#include "base/callback_forward.h"
 #include "base/process.h"
 #include "build/build_config.h"
 #include "content/common/content_export.h"
 #include "ipc/ipc_platform_file.h"
 
 class CommandLine;
 
 namespace base {
 class FilePath;
 }
 
 namespace sandbox {
+class TargetPolicy;
 struct SandboxInterfaceInfo;
 }
 
 namespace content {
 
 #if defined(OS_WIN)
 
 // Initialize the sandbox for renderer, gpu, utility, worker, nacl, and plug-in
 // processes, depending on the command line flags. Although The browser process
 // is not sandboxed, this also needs to be called because it will initialize
@@ skipping 22 matching lines @@
 // handles to 64-bit NaCl processes.  This returns true on success,
 // false otherwise.
 CONTENT_EXPORT bool BrokerAddTargetPeer(HANDLE peer_process);
 
 // Starts a sandboxed process with the given directory unsandboxed
 // and returns a handle to it.
 CONTENT_EXPORT base::ProcessHandle StartProcessWithAccess(
     CommandLine* cmd_line,
     const base::FilePath& exposed_dir);
 
+// Allows an embeddder to modify the security policy used for the sandboxxed
+// process.
+// TODO(jam): this should be on ContentClient instead of a static, but it's done
+// this way since chrome_nacl_win64 needs this but doesn't pull in
+// ContentClient. Once we don't have the chrome_nacl_win64 target, we can move
+// this to ContentClient.
+typedef base::Callback<void(CommandLine*, sandbox::TargetPolicy*)>
+    SandboxedProcessStartingCallback;
+CONTENT_EXPORT void SetSandboxedProcessStartingCallback(
+    const SandboxedProcessStartingCallback& callback);
+
 #elif defined(OS_MACOSX)
 
 // Initialize the sandbox of the given |sandbox_type|, optionally specifying a
 // directory to allow access to. Note specifying a directory needs to be
 // supported by the sandbox profile associated with the given |sandbox_type|.
 // Valid values for |sandbox_type| are defined either by the enum SandboxType,
 // or by ContentClient::GetSandboxProfileForSandboxType().
 //
 // If the |sandbox_type| isn't one of the ones defined by content then the
 // embedder is queried using ContentClient::GetSandboxPolicyForSandboxType().
@@ skipping 26 matching lines @@
 // DUPLICATE_SAME_ACCESS flag. On posix it behaves essentially the same as
 // IPC::GetFileHandleForProcess()
 CONTENT_EXPORT IPC::PlatformFileForTransit BrokerGetFileHandleForProcess(
     base::PlatformFile handle,
     base::ProcessId target_process_id,
     bool should_close_source);
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_