services/shell: Turn on sandboxing for mojo apps.

services/catalog/entry.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SERVICES_CATALOG_ENTRY_H_
 #define SERVICES_CATALOG_ENTRY_H_
 
 #include <memory>
 #include <string>
 #include <vector>
@@ skipping 42 matching lines @@
   void set_capabilities(const shell::CapabilitySpec& capabilities) {
     capabilities_ = capabilities;
   }
   const Entry* package() const { return package_; }
   void set_package(Entry* package) { package_ = package; }
 
   std::vector<std::unique_ptr<Entry>> TakeChildren() {
     return std::move(children_);
   }
 
+  bool privileged() const { return privileged_; }
+  void set_privileged(bool privileged) { privileged_ = privileged; }
+
  private:
   std::string name_;
   base::FilePath path_;
   std::string qualifier_;
   std::string display_name_;
   shell::CapabilitySpec capabilities_;
   Entry* package_ = nullptr;
+  bool privileged_ = false;
   std::vector<std::unique_ptr<Entry>> children_;
 };
 
 }  // namespace catalog
 
 namespace mojo {
 template <>
 struct TypeConverter<shell::mojom::ResolveResultPtr, catalog::Entry> {
   static shell::mojom::ResolveResultPtr Convert(const catalog::Entry& input);
 };
 
 template<>
 struct TypeConverter<catalog::mojom::EntryPtr, catalog::Entry> {
   static catalog::mojom::EntryPtr Convert(const catalog::Entry& input);
 };
 
 }  // namespace mojo
 
 #endif  // SERVICES_CATALOG_ENTRY_H_