Split secure command channel and untrusted application channel

src/trusted/service_runtime/nacl_command_service.h

Index: src/trusted/service_runtime/nacl_command_service.h
diff --git a/src/trusted/service_runtime/nacl_command_service.h b/src/trusted/service_runtime/nacl_command_service.h
new file mode 100644
index 0000000000000000000000000000000000000000..c35562e10557639eeffee66bcab6303c200624bb
--- /dev/null
+++ b/src/trusted/service_runtime/nacl_command_service.h
@@ -0,0 +1,36 @@
+/*
+ * Copyright (c) 2012 The Native Client Authors. All rights reserved.
+ * Use of this source code is governed by a BSD-style license that can be
+ * found in the LICENSE file.
+ */
+
+#ifndef NATIVE_CLIENT_SRC_TRUSTED_SERVICE_RUNTIME_NACL_COMMAND_SERVICE_H_
+#define NATIVE_CLIENT_SRC_TRUSTED_SERVICE_RUNTIME_NACL_COMMAND_SERVICE_H_
+
+#include "native_client/src/include/nacl_base.h"
+#include "native_client/src/trusted/service_runtime/sel_ldr.h"
+#include "native_client/src/trusted/simple_service/nacl_simple_service.h"
+
+EXTERN_C_BEGIN
+
+/*
+ * Command channel.
+ */
+
+struct NaClCommandService {
+  struct NaClSimpleService      base;
+  struct NaClApp                *nap;
+};
+
+int NaClCommandServiceCtor(
+    struct NaClCommandService          *self,
+    struct NaClSrpcHandlerDesc const  *srpc_handlers,
+    struct NaClApp                    *nap);
+
+void NaClCommandServiceDtor(struct NaClRefCount *vself);
+
+extern struct NaClSimpleServiceVtbl const kNaClCommandServiceVtbl;
+
+EXTERN_C_END
+
+#endif /* NATIVE_CLIENT_SRC_TRUSTED_SERVICE_RUNTIME_NACL_COMMAND_SERVICE_H_ */