Fix for running Chrome under a service token.

sandbox/win/src/acl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/acl.h"
 
 #include <aclapi.h>
 #include <sddl.h>
 
 #include "base/logging.h"
@@ skipping 70 matching lines @@
   ::LocalFree(new_dacl);
   return (TRUE == ret);
 }
 
 bool RevokeLogonSidFromDefaultDacl(HANDLE token) {
   DWORD size = sizeof(TOKEN_GROUPS) + SECURITY_MAX_SID_SIZE;
   TOKEN_GROUPS* logon_sid = reinterpret_cast<TOKEN_GROUPS*>(malloc(size));
 
   std::unique_ptr<TOKEN_GROUPS, base::FreeDeleter> logon_sid_ptr(logon_sid);
 
-  if (!::GetTokenInformation(token, TokenLogonSid, logon_sid, size, &size))
+  if (!::GetTokenInformation(token, TokenLogonSid, logon_sid, size, &size)) {
+    // If no logon sid, there's nothing to revoke.
+    if (::GetLastError() == ERROR_NOT_FOUND)
+      return true;
     return false;
+  }
   if (logon_sid->GroupCount < 1) {
     ::SetLastError(ERROR_INVALID_TOKEN);
     return false;
   }
   return AddSidToDefaultDacl(token,
                              reinterpret_cast<SID*>(logon_sid->Groups[0].Sid),
                              REVOKE_ACCESS, 0);
 }
 
 bool AddUserSidToDefaultDacl(HANDLE token, ACCESS_MASK access) {
@@ skipping 34 matching lines @@
   ::LocalFree(new_dacl);
   ::LocalFree(descriptor);
 
   if (ERROR_SUCCESS != result)
     return false;
 
   return true;
 }
 
 }  // namespace sandbox