Add an initial Linux GPU sandbox using the seccomp filter framework.

content/public/common/sandbox_init.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #define CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_
 #pragma once
 
 #include "build/build_config.h"
 #include "content/common/content_export.h"
@@ skipping 28 matching lines @@
 // If the |sandbox_type| isn't one of the ones defined by content then the
 // embedder is queried using ContentClient::GetSandboxPolicyForSandboxType().
 // The embedder can use values for |sandbox_type| starting from
 // content::sandbox::SANDBOX_PROCESS_TYPE_AFTER_LAST_TYPE.
 //
 // Returns true if the sandbox was initialized succesfully, false if an error
 // occurred.  If process_type isn't one that needs sandboxing, no action is
 // taken and true is always returned.
 CONTENT_EXPORT bool InitializeSandbox(int sandbox_type,
                                       const FilePath& allowed_path);
+#elif defined(OS_LINUX)
+CONTENT_EXPORT void InitializeSandbox();
 #endif
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SANDBOX_INIT_H_