Index: chrome/common/chrome_content_client.cc |
=================================================================== |
--- chrome/common/chrome_content_client.cc (revision 188116) |
+++ chrome/common/chrome_content_client.cc (working copy) |
@@ -439,7 +439,17 @@ |
return ResourceBundle::GetSharedInstance().GetNativeImageNamed(resource_id); |
} |
-#if defined(OS_MACOSX) && !defined(OS_IOS) |
+#if defined(OS_WIN) |
+void ChromeContentClient::AddPolicy(CommandLine* command_line, |
+ sandbox::TargetPolicy* policy) { |
+ // Allow the server side of a pipe restricted to the "chrome.nacl." |
+ // namespace so that it cannot impersonate other system or other chrome |
+ // service pipes. |
+ policy->AddRule(sandbox::TargetPolicy::SUBSYS_NAMED_PIPES, |
+ sandbox::TargetPolicy::NAMEDPIPES_ALLOW_ANY, |
+ L"\\\\.\\pipe\\chrome.nacl.*"); |
+} |
+#elif defined(OS_MACOSX) && !defined(OS_IOS) |
bool ChromeContentClient::GetSandboxProfileForSandboxType( |
int sandbox_type, |
int* sandbox_profile_resource_id) const { |