Adding method to create process using LowBox token in sandbox code.

sandbox/win/src/target_process.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_WIN_SRC_TARGET_PROCESS_H_
 #define SANDBOX_WIN_SRC_TARGET_PROCESS_H_
 
 #include <windows.h>
 
 #include "base/basictypes.h"
@@ skipping 27 matching lines @@
   ~TargetProcess();
 
   // TODO(cpu): Currently there does not seem to be a reason to implement
   // reference counting for this class since is internal, but kept the
   // the same interface so the interception framework does not need to be
   // touched at this point.
   void AddRef() {}
   void Release() {}
 
   // Creates the new target process. The process is created suspended.
+  // set_lockdown_token_after_create: When set, takes alternate path of

[rvargas (doing something else), 2015/02/28 01:10:07]

nit: use running prose to describe args: when |var| is set, the lockdown token
is replaced after the process is created. (or lockdown_token_). Mentioning
alternate paths here just confuses things.

[Shrikant Kelkar, 2015/02/28 01:55:42]

Done.

+  // creating process with default token first followed by setting of thread
+  // token and process token. This approach is required for new LowBox token.
   DWORD Create(const wchar_t* exe_path,
                const wchar_t* command_line,
                bool inherit_handles,
+               bool set_lockdown_token_after_create,
                const base::win::StartupInformation& startup_info,
                base::win::ScopedProcessInformation* target_info);
 
   // Destroys the target process.
   void Terminate();
 
   // Creates the IPC objects such as the BrokerDispatcher and the
   // IPC server. The IPC server uses the services of the thread_pool.
   DWORD Init(Dispatcher* ipc_dispatcher, void* policy,
              uint32 shared_IPC_size, uint32 shared_policy_size);
@@ skipping 62 matching lines @@
 };
 
 // Creates a mock TargetProcess used for testing interceptions.
 // TODO(cpu): It seems that this method is not going to be used anymore.
 TargetProcess* MakeTestTargetProcess(HANDLE process, HMODULE base_address);
 
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_WIN_SRC_TARGET_PROCESS_H_