Linux sandbox: cleanup sandbox-bpf naming.

sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h

Index: sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
diff --git a/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h b/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
index c54291a34c90e2091485a10d40359c5df021a9df..65b7c4721987000e56afb399169b29d111d1a6f5 100644
--- a/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
+++ b/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
@@ -11,51 +11,46 @@
 // sandbox that reduces the Linux kernel's attack surface. They return an
 // ErrorCode suitable to restrict certain system call parameters.
 
-namespace playground2 {
-class ErrorCode;
-class Sandbox;
-}
-
-using playground2::ErrorCode;
-using playground2::Sandbox;
-
 namespace sandbox {
 
+class ErrorCode;
+class SandboxBPF;
+
 // Allow clone(2) for threads.
 // Reject fork(2) attempts with EPERM.
 // Don't restrict on ASAN.
 // Crash if anything else is attempted.
-ErrorCode RestrictCloneToThreadsAndEPERMFork(Sandbox* sandbox);
+ErrorCode RestrictCloneToThreadsAndEPERMFork(SandboxBPF* sandbox);
 
 // Allow PR_SET_NAME, PR_SET_DUMPABLE, PR_GET_DUMPABLE.
 // Crash if anything else is attempted.
-ErrorCode RestrictPrctl(Sandbox* sandbox);
+ErrorCode RestrictPrctl(SandboxBPF* sandbox);
 
 // Allow TCGETS and FIONREAD.
 // Crash if anything else is attempted.
-ErrorCode RestrictIoctl(Sandbox* sandbox);
+ErrorCode RestrictIoctl(SandboxBPF* sandbox);
 
 // Restrict the flags argument in mmap(2).
 // Only allow: MAP_SHARED | MAP_PRIVATE | MAP_ANONYMOUS |
 // MAP_STACK | MAP_NORESERVE | MAP_FIXED | MAP_DENYWRITE.
 // Crash if any other flag is used.
-ErrorCode RestrictMmapFlags(Sandbox* sandbox);
+ErrorCode RestrictMmapFlags(SandboxBPF* sandbox);
 
 // Restrict the prot argument in mprotect(2).
 // Only allow: PROT_READ | PROT_WRITE | PROT_EXEC.
-ErrorCode RestrictMprotectFlags(Sandbox* sandbox);
+ErrorCode RestrictMprotectFlags(SandboxBPF* sandbox);
 
 // Restrict fcntl(2) cmd argument to:
 // We allow F_GETFL, F_SETFL, F_GETFD, F_SETFD, F_DUPFD, F_DUPFD_CLOEXEC,
 // F_SETLK, F_SETLKW and F_GETLK.
 // Also, in F_SETFL, restrict the allowed flags to: O_ACCMODE | O_APPEND |
 // O_NONBLOCK | O_SYNC | O_LARGEFILE | O_CLOEXEC | O_NOATIME.
-ErrorCode RestrictFcntlCommands(Sandbox* sandbox);
+ErrorCode RestrictFcntlCommands(SandboxBPF* sandbox);
 
 #if defined(__i386__)
 // Restrict socketcall(2) to only allow socketpair(2), send(2), recv(2),
 // sendto(2), recvfrom(2), shutdown(2), sendmsg(2) and recvmsg(2).
-ErrorCode RestrictSocketcallCommand(Sandbox* sandbox);
+ErrorCode RestrictSocketcallCommand(SandboxBPF* sandbox);
 #endif
 
 }  // namespace sandbox.