Make a small change to the API. Instead of passing in a file

sandbox.h

Index: sandbox.h
===================================================================
--- sandbox.h	(revision 179)
+++ sandbox.h	(working copy)
@@ -6,7 +6,7 @@
 #define SANDBOX_H__
 
 extern "C" int  SupportsSeccompSandbox(int proc_fd);

[jln (very slow on Chromium), 2012/04/27 23:00:29]

LGTM

Could you document that the caller to SupportsSeccompSandbox should take care of
closing proc_fd if necessary ?

[Mark Seaborn, 2012/04/27 23:07:38]

Hmm, yes, that would be different from SeccompSandboxSetProcSelf(), which takes
ownership of its FD argument.

-extern "C" void SeccompSandboxSetProcSelfMaps(int proc_self_maps);
+extern "C" void SeccompSandboxSetProcSelf(int proc_self);

[Mark Seaborn, 2012/04/27 23:07:38]

Would SeccompSandboxSetProcSelfFd(int proc_self_fd) be better as a more
descriptive name, perhaps?

 extern "C" void StartSeccompSandbox();
 
 #endif // SANDBOX_H__