Mac: Tell the GPU sandbox to deny a few things.

It's now no longer allowed to do network requests and can't access most files.

Here are the stacks that it prints if I patch in http://codereview.chromium.org/1765005/show: http://codepad.org/6zrJfnlB

BUG=48607
TEST=GPU stuff still works. When you run with --enable-sandbox-logging, quite a bunch of stuff is logged as "denied".

Review URL: http://codereview.chromium.org/5580002

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@68321 0039d316-1c4b-4281-b951-d872f2087c98
6 files changed