Add mknod* to the list of syscalls which use filesystem paths. mknod() has

content/common/sandbox_init_linux.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/sandbox_init.h"
 
 #if defined(__i386__) || defined(__x86_64__)
 
 // This is an assert for GYP
 #if !defined(OS_LINUX)
@@ skipping 119 matching lines @@
     case __NR_openat:
     case __NR_execve:
     case __NR_access:
     case __NR_mkdir:
     case __NR_mkdirat:
     case __NR_readlink:
     case __NR_readlinkat:
     case __NR_stat:
     case __NR_lstat:
     case __NR_chdir:
+    case __NR_mknod:
+    case __NR_mknodat:
       return true;
     default:
       return false;
   }
 }
 
 #if defined(__x86_64__)
 // x86_64 only because it references system calls that are multiplexed on IA32.
 playground2::Sandbox::ErrorCode GpuProcessPolicy_x86_64(int sysno) {
   switch(sysno) {
@@ skipping 301 matching lines @@
 
 namespace content {
 
 void InitializeSandbox() {
 #if defined(__i386__) || defined(__x86_64__)
   InitializeSandbox_x86();
 #endif
 }
 
 }  // namespace content