| Index: chrome/common/chrome_content_client.cc
|
| ===================================================================
|
| --- chrome/common/chrome_content_client.cc (revision 188116)
|
| +++ chrome/common/chrome_content_client.cc (working copy)
|
| @@ -439,7 +439,17 @@
|
| return ResourceBundle::GetSharedInstance().GetNativeImageNamed(resource_id);
|
| }
|
|
|
| -#if defined(OS_MACOSX) && !defined(OS_IOS)
|
| +#if defined(OS_WIN)
|
| +void ChromeContentClient::AddPolicy(CommandLine* command_line,
|
| + sandbox::TargetPolicy* policy) {
|
| + // Allow the server side of a pipe restricted to the "chrome.nacl."
|
| + // namespace so that it cannot impersonate other system or other chrome
|
| + // service pipes.
|
| + policy->AddRule(sandbox::TargetPolicy::SUBSYS_NAMED_PIPES,
|
| + sandbox::TargetPolicy::NAMEDPIPES_ALLOW_ANY,
|
| + L"\\\\.\\pipe\\chrome.nacl.*");
|
| +}
|
| +#elif defined(OS_MACOSX) && !defined(OS_IOS)
|
| bool ChromeContentClient::GetSandboxProfileForSandboxType(
|
| int sandbox_type,
|
| int* sandbox_profile_resource_id) const {
|
|
|