Revert 128016 - Make sandbox explicitly block opening broker and sandboxed processes

sandbox/src/restricted_token_utils.h

-// Copyright (c) 2012 The Chromium Authors. All rights reserved.
+// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_SRC_RESTRICTED_TOKEN_UTILS_H__
 #define SANDBOX_SRC_RESTRICTED_TOKEN_UTILS_H__
 
 #include <accctrl.h>
 #include <windows.h>
 
 #include "sandbox/src/restricted_token.h"
@@ skipping 59 matching lines @@
 // Sets the integrity level on a token. This is only valid on Vista. It returns
 // without failing on XP. If the integrity level that you specify is greater
 // than the current integrity level, the function will fail.
 DWORD SetTokenIntegrityLevel(HANDLE token, IntegrityLevel integrity_level);
 
 // Sets the integrity level on the current process on Vista. It returns without
 // failing on XP. If the integrity level that you specify is greater than the
 // current integrity level, the function will fail.
 DWORD SetProcessIntegrityLevel(IntegrityLevel integrity_level);
 
-// Adds deny ACEs on the supplied object for WinRestrictedCodeSid and
-// WinNullSid. This prevents the object from being accessible to sandboxed
-// processes. This prevents the object from being accessed by a sandboxed
-// process at USER_INTERACTIVE through USER_LOCKDOWN;
-DWORD SetObjectDenyRestrictedAndNull(HANDLE handle, SE_OBJECT_TYPE type);
-
 }  // namespace sandbox
 
 #endif  // SANDBOX_SRC_RESTRICTED_TOKEN_UTILS_H__