Linux: initialize the sandbox in the Plugin process.

content/plugin/plugin_main.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "build/build_config.h"
 
 #if defined(OS_WIN)
 #include <objbase.h>
 #include <windows.h>
 #endif
 
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/hi_res_timer_manager.h"
 #include "base/message_loop.h"
 #include "base/string_util.h"
 #include "base/system_monitor/system_monitor.h"
 #include "base/threading/platform_thread.h"
 #include "content/common/child_process.h"
 #include "content/plugin/plugin_thread.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/common/main_function_params.h"
+#include "content/public/common/sandbox_init.h"
 
 #if defined(OS_WIN)
 #include "content/public/common/injection_test_win.h"
 #include "sandbox/win/src/sandbox.h"
 #elif defined(OS_POSIX) && !defined(OS_MACOSX)
 #include "base/global_descriptors_posix.h"
 #include "ipc/ipc_descriptors.h"
 #endif
 
 #if defined(OS_MACOSX)
@@ skipping 135 matching lines @@
       sandbox_test_module = LoadLibrary(test_plugin_name.c_str());
       DCHECK(sandbox_test_module);
     }
   }
 #endif
   if (parsed_command_line.HasSwitch(switches::kPluginStartupDialog)) {
     ChildProcess::WaitForDebugger("Plugin");
   }
 
   {
+#if defined(OS_LINUX)
+    // Go through Linux sandbox initialization before starting any thread.
+    content::InitializeSandbox();
+#endif
     ChildProcess plugin_process;
     plugin_process.set_main_thread(new PluginThread());
 #if defined(OS_WIN)
     if (!no_sandbox && target_services) {
       // We are sandboxing the plugin. If it is a generic plug-in, we lock down
       // the sandbox right away, but if it is the built-in flash we let flash
       // start elevated and it will call DelayedLowerToken(0) when it's ready.
       if (IsPluginBuiltInFlash(parsed_command_line)) {
         DVLOG(1) << "Sandboxing flash";
 
@@ skipping 33 matching lines @@
     MessageLoop::current()->Run();
   }
 
 #if defined(OS_WIN)
   DestroyIMEForFlash();
   CoUninitialize();
 #endif
 
   return 0;
 }