Replace IOSurfaceManager by directly passing IOSurface Mach ports over Chrome IPC.

content/browser/bootstrap_sandbox_manager_mac.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/bootstrap_sandbox_manager_mac.h"
 
 #include "base/logging.h"
 #include "base/mac/mac_util.h"
-#include "content/browser/browser_io_surface_manager_mac.h"
 #include "content/browser/mach_broker_mac.h"
 #include "content/common/sandbox_init_mac.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/child_process_data.h"
 #include "content/public/browser/render_process_host.h"
 #include "sandbox/mac/bootstrap_sandbox.h"
 
 namespace content {
 
 // static
@@ skipping 52 matching lines @@
   policy.rules["com.apple.FontServer"] = sandbox::Rule(sandbox::POLICY_ALLOW);
   policy.rules["com.apple.FontObjectsServer"] =
       sandbox::Rule(sandbox::POLICY_ALLOW);
 
   // Allow access to the windowserver. This is needed to get the colorspace
   // during sandbox warmup. Since NSColorSpace conforms to NSCoding, this
   // should be plumbed over IPC instead <http://crbug.com/265709>.
   policy.rules["com.apple.windowserver.active"] =
       sandbox::Rule(sandbox::POLICY_ALLOW);
 
-  // Allow renderers to contact the IOSurfaceManager in the browser to share
-  // accelerated surfaces.
-  policy.rules[BrowserIOSurfaceManager::GetMachPortName()] =
-      sandbox::Rule(sandbox::POLICY_ALLOW);
-
   // Allow access to launchservicesd on 10.10+ otherwise the renderer will crash
   // attempting to get its ASN. http://crbug.com/533537
   if (base::mac::IsOSYosemiteOrLater()) {
     policy.rules["com.apple.coreservices.launchservicesd"] =
         sandbox::Rule(sandbox::POLICY_ALLOW);
   }
 
   sandbox_->RegisterSandboxPolicy(SANDBOX_TYPE_RENDERER, policy);
 }
 
 void BootstrapSandboxManager::AddBaselinePolicy(
     sandbox::BootstrapSandboxPolicy* policy) {
   auto& rules = policy->rules;
 
   // Allow the child to send its task port to the MachBroker.
   rules[MachBroker::GetMachPortName()] = sandbox::Rule(sandbox::POLICY_ALLOW);
 
   // Allow logging to the syslog.
   rules["com.apple.system.logger"] = sandbox::Rule(sandbox::POLICY_ALLOW);
 }
 
 }  // namespace content