Enable the bootstrap sandbox by default.

content/browser/bootstrap_sandbox_manager_mac.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/bootstrap_sandbox_manager_mac.h"
 
+#include "base/command_line.h"
 #include "base/logging.h"
 #include "base/mac/mac_util.h"
 #include "content/browser/browser_io_surface_manager_mac.h"
 #include "content/browser/mach_broker_mac.h"
 #include "content/common/sandbox_init_mac.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/child_process_data.h"
 #include "content/public/browser/render_process_host.h"
+#include "content/public/common/content_switches.h"
 #include "sandbox/mac/bootstrap_sandbox.h"
 
 namespace content {
 
 // static
 bool BootstrapSandboxManager::ShouldEnable() {
-  return false;
+  return !base::CommandLine::ForCurrentProcess()->HasSwitch(
+      switches::kDisableBootstrapSandbox);
 }
 
 // static
 BootstrapSandboxManager* BootstrapSandboxManager::GetInstance() {
   return base::Singleton<BootstrapSandboxManager>::get();
 }
 
 bool BootstrapSandboxManager::EnabledForSandbox(SandboxType sandbox_type) {
   return sandbox_type == SANDBOX_TYPE_RENDERER;
 }
@@ skipping 67 matching lines @@
   auto& rules = policy->rules;
 
   // Allow the child to send its task port to the MachBroker.
   rules[MachBroker::GetMachPortName()] = sandbox::Rule(sandbox::POLICY_ALLOW);
 
   // Allow logging to the syslog.
   rules["com.apple.system.logger"] = sandbox::Rule(sandbox::POLICY_ALLOW);
 }
 
 }  // namespace content