Alter the design of the bootstrap sandbox to only take over the bootstrap port of children when nec…

sandbox/mac/bootstrap_sandbox_unittest.mm

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/mac/bootstrap_sandbox.h"
 
 #include <CoreFoundation/CoreFoundation.h>
 #import <Foundation/Foundation.h>
 #include <mach/mach.h>
 #include <servers/bootstrap.h>
@@ skipping 78 matching lines @@
     BootstrapSandboxPolicy policy;
     if (base::mac::IsOSSnowLeopard())
       policy.rules["com.apple.SecurityServer"] = Rule(POLICY_ALLOW);
     return policy;
   }
 
   void RunChildWithPolicy(int policy_id,
                           const char* child_name,
                           base::ProcessHandle* out_pid) {
     sandbox_->PrepareToForkWithPolicy(policy_id);
-    base::ProcessHandle pid = SpawnChild(child_name);
+    base::LaunchOptions options;
+    options.replacement_bootstrap_name = sandbox_->server_bootstrap_name();
+    base::ProcessHandle pid = SpawnChildWithOptions(child_name, options);
     ASSERT_GT(pid, 0);
     sandbox_->FinishedFork(pid);
     int code = 0;
     EXPECT_TRUE(base::WaitForExitCode(pid, &code));
     EXPECT_EQ(0, code);
     if (out_pid)
       *out_pid = pid;
   }
 
  protected:
@@ skipping 296 matching lines @@
   msg.header.msgh_remote_port = port;
   msg.header.msgh_bits = MACH_MSGH_BITS_REMOTE(MACH_MSG_TYPE_MOVE_SEND);
   strncpy(msg.buf, kSubstituteAck, sizeof(msg.buf));
 
   CHECK_EQ(KERN_SUCCESS, mach_msg_send(&msg.header));
 
   return 0;
 }
 
 }  // namespace sandbox