Added a policy option to restrict the default DACL for tokens.

sandbox/win/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//testing/test.gni")
 
 # This needs to be a static library rather than a sources set because small
 # portions of this are used in some contexts (like chrome_elf), and it
 # doesnn't seem to dead-code strip very well. This saves 12K on chrome_elf.dll,
 # over a source set, for example.
@@ skipping 187 matching lines @@
     "src/handle_inheritance_test.cc",
     "src/handle_policy_test.cc",
     "src/integrity_level_test.cc",
     "src/ipc_ping_test.cc",
     "src/lpc_policy_test.cc",
     "src/named_pipe_policy_test.cc",
     "src/policy_target_test.cc",
     "src/process_mitigations_test.cc",
     "src/process_policy_test.cc",
     "src/registry_policy_test.cc",
+    "src/restricted_token_test.cc",
     "src/sync_policy_test.cc",
     "src/sync_policy_test.h",
     "src/unload_dll_test.cc",
     "tests/common/controller.cc",
     "tests/common/controller.h",
     "tests/common/test_utils.cc",
     "tests/common/test_utils.h",
     "tests/integration_tests/integration_tests.cc",
     "tests/integration_tests/integration_tests_test.cc",
   ]
@@ skipping 84 matching lines @@
     "sandbox_poc/pocdll/spyware.cc",
     "sandbox_poc/pocdll/utils.h",
   ]
 
   defines = [ "POCDLL_EXPORTS" ]
 
   deps = [
     "//build/config/sanitizers:deps",
   ]
 }