Google Chrome for Mac is coming along fine, Jeremy Moskovich explained “how the developers implemented sandboxing, an important Google Chrome feature”. “Starting a sandbox involves a single call to sandbox_init() specifying which resources to block for a specific process. In our case we lock down the process pretty tightly. That means no network access, and very limited or no access to files and Mach ports.”

Full Article: Chromium Blog