Adding method to create process using LowBox token in sandbox code.

sandbox/win/src/target_process.h

Index: sandbox/win/src/target_process.h
diff --git a/sandbox/win/src/target_process.h b/sandbox/win/src/target_process.h
index 9a8dded55a284a38180c71c886a688f9188d9418..e2febc90fdfa8e5c8fa8e49538b38567bf0d251d 100644
--- a/sandbox/win/src/target_process.h
+++ b/sandbox/win/src/target_process.h
@@ -45,9 +45,13 @@ class TargetProcess {
   void Release() {}
 
   // Creates the new target process. The process is created suspended.
+  // set_lockdown_token_after_create: When set, takes alternate path of

[rvargas (doing something else), 2015/02/28 01:10:07]

nit: use running prose to describe args: when |var| is set, the lockdown token
is replaced after the process is created. (or lockdown_token_). Mentioning
alternate paths here just confuses things.

[Shrikant Kelkar, 2015/02/28 01:55:42]

Done.

+  // creating process with default token first followed by setting of thread
+  // token and process token. This approach is required for new LowBox token.
   DWORD Create(const wchar_t* exe_path,
                const wchar_t* command_line,
                bool inherit_handles,
+               bool set_lockdown_token_after_create,
                const base::win::StartupInformation& startup_info,
                base::win::ScopedProcessInformation* target_info);