Implement the V2 sandbox in the process launcher.

content/common/sandbox_mac.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_COMMON_SANDBOX_MAC_H_
 #define CONTENT_COMMON_SANDBOX_MAC_H_
 
 #include <map>
 #include <string>
 
@@ skipping 25 matching lines @@
   // |allowed_dir| - directory to allow access to, currently the only sandbox
   // profile that supports this is SANDBOX_TYPE_UTILITY .
   //
   // Returns true on success, false if an error occurred enabling the sandbox.
   static bool EnableSandbox(int sandbox_type,
                             const base::FilePath& allowed_dir);
 
   // Returns true if the sandbox has been enabled for the current process.
   static bool SandboxIsCurrentlyActive();
 
- private:
   // Convert provided path into a "canonical" path matching what the Sandbox
   // expects i.e. one without symlinks.
   // This path is not necessarily unique e.g. in the face of hardlinks.
   static base::FilePath GetCanonicalSandboxPath(const base::FilePath& path);
 
+  static const char* kSandboxEnableLogging;
+  static const char* kSandboxDisableDenialLogging;
+  static const char* kSandboxHomedirAsLiteral;
+  static const char* kSandboxElCapOrLater;
+  static const char* kSandboxPermittedDir;
+  static const char* kSandboxBundlePath;
+  static const char* kSandboxLoggingPathAsLiteral;
+  static const char* kSandboxChromeBundleId;
+  static const char* kSandboxComponentPath;
+  static const char* kSandboxChromePID;
+
+ private:
   FRIEND_TEST_ALL_PREFIXES(MacDirAccessSandboxTest, StringEscape);
   FRIEND_TEST_ALL_PREFIXES(MacDirAccessSandboxTest, RegexEscape);
   FRIEND_TEST_ALL_PREFIXES(MacDirAccessSandboxTest, SandboxAccess);
 
   DISALLOW_IMPLICIT_CONSTRUCTORS(Sandbox);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_COMMON_SANDBOX_MAC_H_