Initialize the bootstrap sandbox in the browser process.

content/public/common/sandboxed_process_launcher_delegate.h

Index: content/public/common/sandboxed_process_launcher_delegate.h
diff --git a/content/public/common/sandboxed_process_launcher_delegate.h b/content/public/common/sandboxed_process_launcher_delegate.h
index 9dd45ad3f1aa3db07fbe191fb34a0366568fe569..ec8eb0e3d6f8b8f0a2dfd968e91f1768e0b1481e 100644
--- a/content/public/common/sandboxed_process_launcher_delegate.h
+++ b/content/public/common/sandboxed_process_launcher_delegate.h
@@ -62,6 +62,12 @@ class CONTENT_EXPORT SandboxedProcessLauncherDelegate {
   // Return the file descriptor for the IPC channel.
   virtual int GetIpcFd() = 0;
 
+#if defined(OS_MACOSX)
+  // Gets the Mac SandboxType to enforce on the process. Return -1 for no

[Mark Mentovai, 2014/05/30 21:01:13]

What’s a SandboxType? It’s just a registered policy ID, right? You should say
more about this in the comment, because the return value is just “int” and
SandboxType isn’t actually a thing. Implementers will need to know what to do
here.

Maybe the type returned here should be a typedef, like SandboxPolicyID? You
wouldn’t have to say as much in this comment here then.

[Robert Sesek, 2014/05/30 21:05:11]

Yes, it is:

https://code.google.com/p/chromium/codesearch#chromium/src/content/public/com...

[jam, 2014/05/30 21:11:55]

can this be SandboxType instead of "int" then?

[Robert Sesek, 2014/05/30 21:17:35]

Yeah, if I add an INVALID enum value. Done.

+  // sandbox policy.
+  virtual int GetSandboxType();
+#endif
+
 #endif
 };