Add a sandbox policy for duplicating handles into the broker.

sandbox/src/handle_dispatcher.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/src/handle_dispatcher.h"
 
 #include "base/win/scoped_handle.h"
 #include "sandbox/src/handle_interception.h"
 #include "sandbox/src/handle_policy.h"
 #include "sandbox/src/ipc_tags.h"
@@ skipping 52 matching lines @@
   OBJECT_TYPE_INFORMATION* type_info =
       reinterpret_cast<OBJECT_TYPE_INFORMATION*>(buffer);
   ULONG size = sizeof(buffer) - sizeof(wchar_t);
   error = QueryObject(handle, ObjectTypeInformation, type_info, size, &size);
   if (!NT_SUCCESS(error)) {
     ipc->return_info.win32_result = error;
     return false;
   }
   type_info->Name.Buffer[type_info->Name.Length / sizeof(wchar_t)] = L'\0';
 
-  CountedParameterSet<NameBased> params;
-  params[NameBased::NAME] = ParamPickerMake(type_info->Name.Buffer);
+  CountedParameterSet<HandleTarget> params;
+  params[HandleTarget::NAME] = ParamPickerMake(type_info->Name.Buffer);
+  params[HandleTarget::TARGET] = ParamPickerMake(target_process_id);
 
   EvalResult eval = policy_base_->EvalPolicy(IPC_DUPLICATEHANDLEPROXY_TAG,
                                              params.GetBase());
   ipc->return_info.win32_result =
       HandlePolicy::DuplicateHandleProxyAction(eval, *ipc->client_info,
                                                source_handle,
                                                target_process_id,
                                                &ipc->return_info.handle,
                                                desired_access, options);
   return true;
 }
 
 }  // namespace sandbox