Do some plumbing.

shell/child_process_host.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "shell/child_process_host.h"
 
 #include "base/base_switches.h"
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/files/file_path.h"
 #include "base/location.h"
 #include "base/logging.h"
 #include "base/macros.h"
 #include "base/message_loop/message_loop.h"
 #include "base/process/kill.h"
 #include "base/process/launch.h"
 #include "base/task_runner.h"
 #include "base/task_runner_util.h"
+#include "build/build_config.h"
 #include "mojo/edk/embedder/embedder.h"
 #include "mojo/edk/embedder/platform_channel_pair.h"
 #include "mojo/public/cpp/system/message_pipe.h"
+#include "shell/application_manager/native_application_options.h"
 #include "shell/child_switches.h"
 #include "shell/context.h"
 #include "shell/task_runners.h"
 
 namespace shell {
 
 struct ChildProcessHost::LaunchData {
   LaunchData() {}
   ~LaunchData() {}
 
+  NativeApplicationOptions options;
   base::FilePath child_path;
   mojo::embedder::PlatformChannelPair platform_channel_pair;
   std::string child_connection_id;
 };
 
 ChildProcessHost::ChildProcessHost(Context* context)
     : context_(context), channel_info_(nullptr) {
 }
 
 ChildProcessHost::~ChildProcessHost() {
   DCHECK(!child_process_.IsValid());
 }
 
-void ChildProcessHost::Start(bool require_32_bit) {
+void ChildProcessHost::Start(const NativeApplicationOptions& options) {
   DCHECK(!child_process_.IsValid());
 
   scoped_ptr<LaunchData> launch_data(new LaunchData());
+  launch_data->options = options;
   launch_data->child_path = context_->mojo_shell_child_path();
 #if defined(ARCH_CPU_64_BITS)
-  if (require_32_bit)
+  if (options.require_32_bit) {
     launch_data->child_path =
         context_->mojo_shell_child_path().InsertBeforeExtensionASCII("_32");
+  }
 #endif
   // TODO(vtl): Add something for |slave_info|.
   // TODO(vtl): The "unretained this" is wrong (see also below).
   mojo::ScopedMessagePipeHandle handle(mojo::embedder::ConnectToSlave(
       nullptr, launch_data->platform_channel_pair.PassServerHandle(),
       base::Bind(&ChildProcessHost::DidConnectToSlave, base::Unretained(this)),
       base::MessageLoop::current()->message_loop_proxy(),
       &launch_data->child_connection_id, &channel_info_));
   // TODO(vtl): We should destroy the channel on destruction (using
   // |channel_info_|, but only after the callback has been called.
@@ skipping 65 matching lines @@
                                       arraysize(kForwardSwitches));
   child_command_line.AppendSwitchASCII(switches::kChildConnectionId,
                                        launch_data->child_connection_id);
 
   mojo::embedder::HandlePassingInformation handle_passing_info;
   launch_data->platform_channel_pair.PrepareToPassClientHandleToChildProcess(
       &child_command_line, &handle_passing_info);
 
   base::LaunchOptions options;
   options.fds_to_remap = &handle_passing_info;
+#if defined(OS_LINUX)
+  options.allow_new_privs = launch_data->options.allow_new_privs;
+#endif
   DVLOG(2) << "Launching child with command line: "
            << child_command_line.GetCommandLineString();
   base::Process child_process =
       base::LaunchProcess(child_command_line, options);
   if (child_process.IsValid())
     launch_data->platform_channel_pair.ChildProcessLaunched();
   return child_process.Pass();
 }
 
 void ChildProcessHost::AppCompleted(int32_t result) {
   if (!on_app_complete_.is_null()) {
     auto on_app_complete = on_app_complete_;
     on_app_complete_.reset();
     on_app_complete.Run(result);
   }
 }
 
 void ChildProcessHost::OnConnectionError() {
   AppCompleted(MOJO_RESULT_UNKNOWN);
 }
 
 }  // namespace shell