Allow sysctl-read of kern.tcsm_available after kern.tcsm_enable

For an yet unexplained reason, we must allow kern.tcsm_available AFTER
kern.tcsm_enable or we are unable to set kern.tcsm_enable.

Bug: 964353
Change-Id: I732b93cca4d1a6fad07ddba6d5e64c63bcda9c1e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1617634Reviewed-by: Robert Sesek <rsesek@chromium.org>
Commit-Queue: Robert Sesek <rsesek@chromium.org>
Cr-Commit-Position: refs/heads/master@{#661090}

services/service_manager/sandbox/mac/renderer.sb

@@ -95,7 +95,9 @@
 
 ; For V8 to use in thread calculations.
 (if (>= os-version 1014)
-  (allow sysctl-read (sysctl-name "kern.tcsm_available"))
+  ; Ordering of these tcsm sysctls matters. See: https://crbug.com/964353
   (allow sysctl-read (sysctl-name "kern.tcsm_enable"))
   (allow sysctl-write (sysctl-name "kern.tcsm_enable"))
+  (allow sysctl-read (sysctl-name "kern.tcsm_available"))
+
 )