Add basic ARM policy to seccomp-bpf sandbox.

sandbox/linux/services/arm_linux_syscalls.h

Index: sandbox/linux/services/arm_linux_syscalls.h
diff --git a/sandbox/linux/services/arm_linux_syscalls.h b/sandbox/linux/services/arm_linux_syscalls.h
new file mode 100644
index 0000000000000000000000000000000000000000..b3cbc10d406150e39a92523dcd6f02ae08f10f5c
--- /dev/null
+++ b/sandbox/linux/services/arm_linux_syscalls.h
@@ -0,0 +1,23 @@
+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Generated from the Linux kernel's calls.S.
+#ifndef SANDBOX_LINUX_SERVICES_ARM_LINUX_SYSCALLS_H_
+#define SANDBOX_LINUX_SERVICES_ARM_LINUX_SYSCALLS_H_
+
+#if !defined(__arm__)
+#error "Including header on wrong architecture"
+#endif
+
+#include <asm/unistd.h>

[jln (very slow on Chromium), 2012/08/14 19:10:35]

Please, add a comment stating that this is a diff too the older unistd.h we're
expected to support for this architecture.

[Jorge Lucangeli Obes, 2012/08/14 21:58:06]

The reason we need unistd is that NR_SYSCALL_BASE is defined there.

+
+#ifndef __NR_process_vm_readv
+#define __NR_process_vm_readv (__NR_SYSCALL_BASE+376)
+#endif
+
+#ifndef __NR_process_vm_writev
+#define __NR_process_vm_writev (__NR_SYSCALL_BASE+377)
+#endif
+
+#endif  // SANDBOX_LINUX_SERVICES_ARM_LINUX_SYSCALLS_H_