Add PRESUBMIT rule to make sure IPC changes are security reviewed.

content/common/OWNERS

Index: content/common/OWNERS
diff --git a/content/common/OWNERS b/content/common/OWNERS
index 872aef9cf76565e2a3f680f70dd43cd0358f6133..574417d35b21444a1a25aa21aa45a8c36787bc09 100644
--- a/content/common/OWNERS
+++ b/content/common/OWNERS
@@ -17,70 +17,20 @@ per-file pepper*=bauerb@chromium.org
 per-file plugin*=ananta@chromium.org
 per-file plugin*=bauerb@chromium.org
 
-# Changes to IPC messages require a security review to avoid introducing
-# new sandbox escapes.
-per-file *_message*.h=set noparent
-per-file *_message*.h=dcheng@chromium.org
-per-file *_message*.h=inferno@chromium.org
-per-file *_message*.h=jln@chromium.org
-per-file *_message*.h=jschuh@chromium.org
-per-file *_message*.h=kenrb@chromium.org
-per-file *_message*.h=mkwst@chromium.org
-per-file *_message*.h=nasko@chromium.org
-per-file *_message*.h=palmer@chromium.org
-per-file *_message*.h=tsepez@chromium.org
-per-file *_message*.h=wfh@chromium.org
+per-file *_messages*.h=set noparent

[dcheng, 2016/06/15 10:42:27]

The loss in coverage from this seems relatively minor: I have a hard time seeing
how something meaningful will get missed with *_messages*.h but not
*_message*.h. The reason for doing this is the PRESUBMIT check is fairly dumb
and straightforward: it's just a straight string comparison.

I can make it more clever in a followup CL if this is really that important
though.

+per-file *_messages*.h=file://ipc/SECURITY_OWNERS
 
 per-file *_messages.cc=set noparent
-per-file *_messages.cc=dcheng@chromium.org
-per-file *_messages.cc=inferno@chromium.org
-per-file *_messages.cc=jln@chromium.org
-per-file *_messages.cc=jschuh@chromium.org
-per-file *_messages.cc=kenrb@chromium.org
-per-file *_messages.cc=mkwst@chromium.org
-per-file *_messages.cc=nasko@chromium.org
-per-file *_messages.cc=palmer@chromium.org
-per-file *_messages.cc=tsepez@chromium.org
-per-file *_messages.cc=wfh@chromium.org
+per-file *_messages.cc=file://ipc/SECURITY_OWNERS
 
-per-file *param_traits*.h=set noparent
-per-file *param_traits*.h=dcheng@chromium.org
-per-file *param_traits*.h=inferno@chromium.org
-per-file *param_traits*.h=jln@chromium.org
-per-file *param_traits*.h=jschuh@chromium.org
-per-file *param_traits*.h=kenrb@chromium.org
-per-file *param_traits*.h=mkwst@chromium.org
-per-file *param_traits*.h=nasko@chromium.org
-per-file *param_traits*.h=palmer@chromium.org
-per-file *param_traits*.h=tsepez@chromium.org
-per-file *param_traits*.h=wfh@chromium.org
+per-file *param_traits*.*=set noparent
+per-file *param_traits*.*=file://ipc/SECURITY_OWNERS
 
 per-file *font_config_ipc_linux*=set noparent
-per-file *font_config_ipc_linux*=dcheng@chromium.org
-per-file *font_config_ipc_linux*=inferno@chromium.org
-per-file *font_config_ipc_linux*=jln@chromium.org
-per-file *font_config_ipc_linux*=jschuh@chromium.org
-per-file *font_config_ipc_linux*=kenrb@chromium.org
-per-file *font_config_ipc_linux*=mkwst@chromium.org
-per-file *font_config_ipc_linux*=nasko@chromium.org
-per-file *font_config_ipc_linux*=palmer@chromium.org
-per-file *font_config_ipc_linux*=tsepez@chromium.org
-per-file *font_config_ipc_linux*=wfh@chromium.org
+per-file *font_config_ipc_linux*=file://ipc/SECURITY_OWNERS
 
-# Changes to Mojo interfaces require a security review to avoid
-# introducing new sandbox escapes.
 per-file *.mojom=set noparent
-per-file *.mojom=dcheng@chromium.org
-per-file *.mojom=inferno@chromium.org
-per-file *.mojom=jln@chromium.org
-per-file *.mojom=jschuh@chromium.org
-per-file *.mojom=kenrb@chromium.org
-per-file *.mojom=mkwst@chromium.org
-per-file *.mojom=nasko@chromium.org
-per-file *.mojom=palmer@chromium.org
-per-file *.mojom=tsepez@chromium.org
-per-file *.mojom=wfh@chromium.org
-
+per-file *.mojom=file://ipc/SECURITY_OWNERS
 
 # Accessibility
 per-file accessibility_node_data.*=dmazzoni@chromium.org