First pass at content shell for the Mac. Doesn't work yet.

chrome/installer/mac/sign_versioned_dir.sh.in

 #!/bin/bash -p
 
-# Copyright (c) 2011 The Chromium Authors. All rights reserved.
+# Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Using codesign, sign the contents of the versioned directory. Namely, this
 # includes the framework and helper app. After signing, the signatures are
 # verified.
 
 set -eu
 
 # Environment sanitization. Set a known-safe PATH. Clear environment variables
@@ skipping 17 matching lines @@
 app_path="${1}"
 codesign_keychain="${2}"
 codesign_id="${3}"
 
 versioned_dir="${app_path}/Contents/Versions/@VERSION@"
 
 # An .app bundle to be signed can be signed directly. Normally, signing a
 # framework bundle requires that each version within be signed individually.
 # http://developer.apple.com/mac/library/technotes/tn2007/tn2206.html#TNTAG13
 # In Chrome's case, the framework bundle is unversioned, so it too can be
-# signed directly. See copy_framework_unversioned.
+# signed directly. See copy_framework_unversioned.sh.
 
 framework="${versioned_dir}/@MAC_PRODUCT_NAME@ Framework.framework"
 helper_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper.app"
 helper_eh_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper EH.app"
 helper_np_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper NP.app"
 
 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" "${framework}"
 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" "${helper_app}"
 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" \
     "${helper_eh_app}"
 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" \
     "${helper_np_app}"
 
 # Verify everything.
 codesign -v "${framework}"
 codesign -v "${helper_app}"
 codesign -v "${helper_eh_app}"
 codesign -v "${helper_np_app}"