Added a policy option to restrict the default DACL for tokens.

sandbox/win/sandbox_win.gypi

 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'target_defaults': {
     'variables': {
       'sandbox_windows_target': 0,
       'target_arch%': 'ia32',
     },
@@ skipping 206 matching lines @@
         'tests/integration_tests/integration_tests_test.cc',
         'src/handle_closer_test.cc',
         'src/integrity_level_test.cc',
         'src/ipc_ping_test.cc',
         'src/lpc_policy_test.cc',
         'src/named_pipe_policy_test.cc',
         'src/policy_target_test.cc',
         'src/process_mitigations_test.cc',
         'src/process_policy_test.cc',
         'src/registry_policy_test.cc',
+        'src/restricted_token_test.cc',
         'src/sync_policy_test.cc',
         'src/sync_policy_test.h',
         'src/unload_dll_test.cc',
         'tests/common/controller.cc',
         'tests/common/controller.h',
         'tests/common/test_utils.cc',
         'tests/common/test_utils.h',
         'tests/integration_tests/integration_tests.cc',
       ],
     },
@@ skipping 157 matching lines @@
             '../../build/isolate.gypi',
           ],
           'sources': [
             '../sbox_validation_tests.isolate',
           ],
         },
       ],
     }],
   ],
 }