Put app shim IPC socket in a temporary directory. (Mac)

chrome/common/mac/app_mode_common.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_COMMON_MAC_APP_MODE_COMMON_H_
 #define CHROME_COMMON_MAC_APP_MODE_COMMON_H_
 
 #import <Foundation/Foundation.h>
 
 #include "base/files/file_path.h"
 #include "base/strings/string16.h"
 
 // This file contains constants, interfaces, etc. which are common to the
 // browser application and the app mode loader (a.k.a. shim).
 
 namespace app_mode {
 
 // These are keys for an Apple Event ping that the app shim process sends to
 // Chrome to get confirmation that Chrome is alive. The main Chrome process
 // doesn't need to register any handlers for them -- the event is just sent for
 // the empty reply that's automatically returned by the system.
 const AEEventClass kAEChromeAppClass = 'cApp';
 const AEEventID kAEChromeAppPing = 'ping';
 
 // The IPC socket used to communicate between app shims and Chrome will be
-// created under the user data directory with this name.
-extern const char kAppShimSocketName[];
+// created under a temporary directory with this name.
+extern const char kAppShimSocketShortName[];
+// A symlink to allow the app shim to find the socket will be created under the
+// user data dir with this name.
+extern const char kAppShimSocketSymlinkName[];
 
 // Special app mode id used for the App Launcher.
 extern const char kAppListModeId[];
 
 // The process ID of the Chrome process that launched the app shim.
 // The presence of this switch instructs the app shim to send LaunchApp with
 // launch_now = false. This associates the shim without launching the app.
 extern const char kLaunchedByChromeProcessId[];
 
 // The display name of the bundle as shown in Finder and the Dock. For localized
@@ skipping 82 matching lines @@
   // URL for the shortcut. Must be a valid URL.
   std::string app_mode_url;  // Required: v1.0
 
   // Path to the app's user data directory.
   base::FilePath user_data_dir;
 
   // Directory of the profile associated with the app.
   base::FilePath profile_dir;
 };
 
+// Check that the socket and its parent directory have the correct permissions
+// and are owned by the user.
+void VerifySocketPermissions(const base::FilePath& socket_path);
+
 }  // namespace app_mode
 
 #endif  // CHROME_COMMON_MAC_APP_MODE_COMMON_H_