Add flags for v2 sandbox to Chrome and Helper executable.

content/common/sandbox_init_mac.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_init_mac.h"
 
 #include "base/command_line.h"
 #include "base/files/file_path.h"
 #include "base/logging.h"
 #include "content/common/sandbox_mac.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/common/sandbox_init.h"
+#include "sandbox/mac/seatbelt.h"
 
 namespace content {
 
 bool InitializeSandbox(int sandbox_type, const base::FilePath& allowed_dir) {
   // Warm up APIs before turning on the sandbox.
   Sandbox::SandboxWarmup(sandbox_type);
 
   // Actually sandbox the process.
   return Sandbox::EnableSandbox(sandbox_type, allowed_dir);
 }
 
 // Fill in |sandbox_type| and |allowed_dir| based on the command line,  returns
 // false if the current process type doesn't need to be sandboxed or if the
 // sandbox was disabled from the command line.
 bool GetSandboxTypeFromCommandLine(int* sandbox_type,
                                    base::FilePath* allowed_dir) {
   DCHECK(sandbox_type);
   DCHECK(allowed_dir);
 
   *sandbox_type = -1;
   *allowed_dir = base::FilePath();  // Empty by default.
 
   const base::CommandLine& command_line =
       *base::CommandLine::ForCurrentProcess();
   if (command_line.HasSwitch(switches::kNoSandbox))
     return false;
+  if (command_line.HasSwitch(switches::kV2SandboxedEnabled))
+    CHECK(sandbox::Seatbelt::IsSandboxed());
 
   std::string process_type =
       command_line.GetSwitchValueASCII(switches::kProcessType);
   if (process_type.empty()) {
     // Browser process isn't sandboxed.
     return false;
   } else if (process_type == switches::kRendererProcess) {
     *sandbox_type = SANDBOX_TYPE_RENDERER;
   } else if (process_type == switches::kUtilityProcess) {
     // Utility process sandbox.
@@ skipping 19 matching lines @@
 
 bool InitializeSandbox() {
   int sandbox_type = 0;
   base::FilePath allowed_dir;
   if (!GetSandboxTypeFromCommandLine(&sandbox_type, &allowed_dir))
     return true;
   return InitializeSandbox(sandbox_type, allowed_dir);
 }
 
 }  // namespace content