Continuing changes for lpc proxy

content/common/sandbox_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_win.h"
 
 #include <string>
 
 #include "base/base_switches.h"
 #include "base/command_line.h"
@@ skipping 694 matching lines @@
       name.append(base::UintToString(base::GetCurrentProcId()));
 
       base::SharedMemory direct_write_font_cache_section;
       if (direct_write_font_cache_section.Open(name, true)) {
         void* shared_handle =
             policy->AddHandleToShare(direct_write_font_cache_section.handle());
         cmd_line->AppendSwitchASCII(switches::kFontCacheSharedHandle,
             base::UintToString(reinterpret_cast<unsigned int>(shared_handle)));
       }
     }
+    if (policy->AddRule(sandbox::TargetPolicy::SUBSYS_LPC,
+                        sandbox::TargetPolicy::ALPC_CONNECT_ALLOW,
+                        L"*") != sandbox::SBOX_ALL_OK) {
+      return base::Process();
+    }
 #endif
   } else {
     // Hack for Google Desktop crash. Trick GD into not injecting its DLL into
     // this subprocess. See
     // http://code.google.com/p/chromium/issues/detail?id=25580
     cmd_line->AppendSwitchASCII("ignored", " --type=renderer ");
   }
 
   sandbox::ResultCode result;
   if (!exposed_dir.empty()) {
@@ skipping 102 matching lines @@
   }
 
   return false;
 }
 
 bool BrokerAddTargetPeer(HANDLE peer_process) {
   return g_broker_services->AddTargetPeer(peer_process) == sandbox::SBOX_ALL_OK;
 }
 
 }  // namespace content