mandoline: Sandbox mojo:browser and mojo:omnibox.

mandoline/services/core_services/main.cc

Index: mandoline/services/core_services/main.cc
diff --git a/mandoline/services/core_services/main.cc b/mandoline/services/core_services/main.cc
index 91f81e5f5cb96325b5d8d4652d80da2b51f2db90..e9d36ba4dafbb8467396035c31d55c4de4bc01d1 100644
--- a/mandoline/services/core_services/main.cc
+++ b/mandoline/services/core_services/main.cc
@@ -11,6 +11,7 @@
 #if defined(OS_LINUX) && !defined(OS_ANDROID)
 #include "base/rand_util.h"
 #include "base/sys_info.h"
+#include "third_party/icu/source/i18n/unicode/timezone.h"
 
 // TODO(erg): Much of this was coppied from zygote_main_linux.cc
 extern "C" {
@@ -20,12 +21,13 @@ void __attribute__((visibility("default"))) MojoSandboxWarm() {
   base::SysInfo::MaxSharedMemorySize();
   base::SysInfo::NumberOfProcessors();
 
-  // TODO(erg): icu does timezone initialization here.
+  // ICU DateFormat class (used in base/time_format.cc) needs to get the
+  // Olson timezone ID by accessing the zoneinfo files on disk. After
+  // TimeZone::createDefault is called once here, the timezone ID is
+  // cached and there's no more need to access the file system.
+  scoped_ptr<icu::TimeZone> zone(icu::TimeZone::createDefault());
 
   // TODO(erg): Perform OpenSSL warmup; it wants access to /dev/urandom.
-
-  // TODO(erg): Initialize SkFontConfigInterface; it has its own odd IPC system
-  // which probably must be ported to mojo.
 }
 }
 #endif  // defined(OS_LINUX) && !defined(OS_ANDROID)