Block ptrace (and ptrace-like) syscalls from the renderer and worker processs.

content/worker/worker_main.cc

Index: content/worker/worker_main.cc
===================================================================
--- content/worker/worker_main.cc	(revision 139969)
+++ content/worker/worker_main.cc	(working copy)
@@ -11,10 +11,10 @@
 #include "content/common/child_process.h"
 #include "content/common/hi_res_timer_manager.h"
 #include "content/public/common/main_function_params.h"
+#include "content/public/common/sandbox_init.h"
 #include "content/worker/worker_thread.h"
 
 #if defined(OS_WIN)
-#include "content/public/common/sandbox_init.h"
 #include "sandbox/src/sandbox.h"
 #endif
 
@@ -45,6 +45,10 @@
   target_services->LowerToken();
 #endif
 
+#if defined(OS_LINUX)
+  content::InitializeSandbox();
+#endif
+
   const CommandLine& parsed_command_line = parameters.command_line;
   if (parsed_command_line.HasSwitch(switches::kWaitForDebugger)) {
     ChildProcess::WaitForDebugger("Worker");