Linux: initialize the sandbox in the utility process.

content/common/sandbox_seccomp_bpf_linux.cc

Index: content/common/sandbox_seccomp_bpf_linux.cc
diff --git a/content/common/sandbox_seccomp_bpf_linux.cc b/content/common/sandbox_seccomp_bpf_linux.cc
index d9dcfd1b6f773f4f9af10fb5591546972c44325c..446f314f0cf9fd0998fee50de12a064e9f0633ab 100644
--- a/content/common/sandbox_seccomp_bpf_linux.cc
+++ b/content/common/sandbox_seccomp_bpf_linux.cc
@@ -1365,6 +1365,10 @@ Sandbox::EvaluateSyscall GetProcessSyscallPolicy(
     return RendererOrWorkerProcessPolicy_x86_64;
   }
 
+  if (process_type == switches::kUtilityProcess) {
+    return BlacklistDebugAndNumaPolicy;
+  }
+
   NOTREACHED();
   // This will be our default if we need one.
   return AllowAllPolicy;