services/shell: Turn on sandboxing for mojo apps.

services/catalog/entry.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "services/catalog/entry.h"
 
 #include "base/values.h"
 #include "services/catalog/store.h"
 #include "services/shell/public/cpp/names.h"
 
@@ skipping 227 matching lines @@
       services->GetDictionary(i, &service);
       std::unique_ptr<Entry> child = Entry::Deserialize(*service);
       if (child) {
         child->set_package(entry.get());
         // Caller must assume ownership of these items.
         entry->children_.emplace_back(std::move(child));
       }
     }
   }
 
+  // Privileged?
+  bool privileged = false;
+  if (value.HasKey(Store::kPrivilegedKey) &&
+      value.GetBoolean(Store::kPrivilegedKey, &privileged)) {
+    entry->set_privileged(privileged);
+  }
+
   return entry;
 }
 
 bool Entry::ProvidesClass(const std::string& clazz) const {
   return capabilities_.provided.find(clazz) != capabilities_.provided.end();
 }
 
 bool Entry::operator==(const Entry& other) const {
   return other.name_ == name_ && other.qualifier_ == qualifier_ &&
          other.display_name_ == display_name_ &&
@@ skipping 14 matching lines @@
 shell::mojom::ResolveResultPtr
     TypeConverter<shell::mojom::ResolveResultPtr, catalog::Entry>::Convert(
         const catalog::Entry& input) {
   shell::mojom::ResolveResultPtr result(shell::mojom::ResolveResult::New());
   result->name = input.name();
   const catalog::Entry& package = input.package() ? *input.package() : input;
   result->resolved_name = package.name();
   result->qualifier = input.qualifier();
   result->capabilities = input.capabilities();
   result->package_path = package.path();
+  result->privileged = input.privileged();
   return result;
 }
 
 // static
 catalog::mojom::EntryPtr
     TypeConverter<catalog::mojom::EntryPtr, catalog::Entry>::Convert(
         const catalog::Entry& input) {
   catalog::mojom::EntryPtr result(catalog::mojom::Entry::New());
   result->name = input.name();
   result->display_name = input.display_name();
   return result;
 }
 
 }  // namespace mojo