GitLab

In order to enable the hardened runtime, which restricts things such as
writable-executable memory and loading code signed by a different Team
ID, special code signing entitlements must be granted to the Helper.
To keep the capabilities scoped to the process types that require them,
this CL adds two new variants of the Helper app: one for renderers
and one for plugins.

Currently all three Helpers will be code signed in the same way without
any entitlements, but this will change in the future.

Tbr: dschuff@chromium.org
Bug: 850193
Change-Id: I596f5290650e0bfb034d19a1490afe20e1cb1e58
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1627456
Commit-Queue: Robert Sesek <rsesek@chromium.org>
Reviewed-by: Avi Drissman <avi@chromium.org>
Reviewed-by: Mark Mentovai <mark@chromium.org>
Reviewed-by: Caleb Rouleau <crouleau@chromium.org>
Cr-Commit-Position: refs/heads/master@{#669719}