Get rid of internal content includes for sandbox code from chrome.

content/public/common/sandbox_init.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #define CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #pragma once
 
 #include "base/process.h"
 #include "build/build_config.h"
 #include "content/common/content_export.h"
 #include "ipc/ipc_platform_file.h"
 
-#if defined(OS_WIN)
+class CommandLine;
+class FilePath;
+
 namespace sandbox {
 struct SandboxInterfaceInfo;
 }
-#elif defined(OS_MACOSX)
-class FilePath;
-#endif
 
 namespace content {
 
 #if defined(OS_WIN)
 
 // Initialize the sandbox for renderer, gpu, utility, worker, nacl, and plug-in
 // processes, depending on the command line flags. Although The browser process
 // is not sandboxed, this also needs to be called because it will initialize
 // the broker code.
 // Returns true if the sandbox was initialized succesfully, false if an error
@@ skipping 14 matching lines @@
 
 // Inform the current process's sandbox broker (e.g. the broker for
 // 32-bit processes) about a process created under a different sandbox
 // broker (e.g. the broker for 64-bit processes).  This allows
 // BrokerDuplicateHandle() to send handles to a process managed by
 // another broker.  For example, it allows the 32-bit renderer to send
 // handles to 64-bit NaCl processes.  This returns true on success,
 // false otherwise.
 CONTENT_EXPORT bool BrokerAddTargetPeer(HANDLE peer_process);
 
+// Starts a sandboxed process with the given directory unsandboxed
+// and returns a handle to it.
+CONTENT_EXPORT base::ProcessHandle StartProcessWithAccess(
+    CommandLine* cmd_line,
+    const FilePath& exposed_dir);
+
 #elif defined(OS_MACOSX)
 
 // Initialize the sandbox of the given |sandbox_type|, optionally specifying a
 // directory to allow access to. Note specifying a directory needs to be
 // supported by the sandbox profile associated with the given |sandbox_type|.
 // Valid values for |sandbox_type| are defined either by the enum SandboxType,
 // or by ContentClient::GetSandboxProfileForSandboxType().
 //
 // If the |sandbox_type| isn't one of the ones defined by content then the
 // embedder is queried using ContentClient::GetSandboxPolicyForSandboxType().
@@ skipping 17 matching lines @@
 // DUPLICATE_SAME_ACCESS flag. On posix it behaves essentially the same as
 // IPC::GetFileHandleForProcess()
 CONTENT_EXPORT IPC::PlatformFileForTransit BrokerGetFileHandleForProcess(
     base::PlatformFile handle,
     base::ProcessId target_process_id,
     bool should_close_source);
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_