Use capability spec to control interfaces exposed between gpu & browser processes.

content/public/app/mojo/content_browser_manifest.json

Index: content/public/app/mojo/content_browser_manifest.json
diff --git a/content/public/app/mojo/content_browser_manifest.json b/content/public/app/mojo/content_browser_manifest.json
index f5d3d9f8ac8aabc184696dadefd06fa9b6b7249f..1d2d0fee84abb6789910f1bdce8ad6e771af6e3f 100644
--- a/content/public/app/mojo/content_browser_manifest.json
+++ b/content/public/app/mojo/content_browser_manifest.json
@@ -6,10 +6,9 @@
   "capabilities": {
     // Remove this once http://crbug.com/632818 is fixed.
     "provided": {
-      "all_interfaces": [ "*" ],
       "gpu": [ ],
       "plugin":  [ ],
-      "web": [
+      "renderer": [
         "blink::mojom::BackgroundSyncService",
         "blink::mojom::BroadcastChannelProvider",
         "blink::mojom::BudgetService",
@@ -36,7 +35,7 @@
 
       // We allow the browser to connect to any interfaces exposed by its child
       // processes in the "browser" class.
-      "exe:content_gpu": { "classes": [ "all_interfaces" ] },
+      "exe:content_gpu": { "classes": [ "browser" ] },
       "exe:content_plugin": { "classes": [ "browser" ] },
       "exe:content_renderer": { "classes": [ "browser" ] },
       "exe:content_utility": { "classes": [ "browser" ] },