Non-SFI mode: Sandbox support for NaCl async-signals.

components/nacl/loader/nonsfi/nonsfi_sandbox.h

Index: components/nacl/loader/nonsfi/nonsfi_sandbox.h
diff --git a/components/nacl/loader/nonsfi/nonsfi_sandbox.h b/components/nacl/loader/nonsfi/nonsfi_sandbox.h
index 42952120423857ccd443efc424465090396962e5..71a20a6dde459a9873e9e0368c84f0e3a18a72d0 100644
--- a/components/nacl/loader/nonsfi/nonsfi_sandbox.h
+++ b/components/nacl/loader/nonsfi/nonsfi_sandbox.h
@@ -18,13 +18,16 @@ namespace nonsfi {
 // depends on seccomp sandbox.
 class NaClNonSfiBPFSandboxPolicy : public sandbox::bpf_dsl::Policy {
  public:
-  explicit NaClNonSfiBPFSandboxPolicy() {}
-  ~NaClNonSfiBPFSandboxPolicy() override {}
+  explicit NaClNonSfiBPFSandboxPolicy();
+  ~NaClNonSfiBPFSandboxPolicy() override;
 
   sandbox::bpf_dsl::ResultExpr EvaluateSyscall(int sysno) const override;
   sandbox::bpf_dsl::ResultExpr InvalidSyscall() const override;
 
  private:
+  // The PID that the policy applies to (should be equal to the current pid).
+  pid_t policy_pid_;

[jln (very slow on Chromium), 2015/08/17 23:08:35]

const

[Luis Héctor Chávez, 2015/08/17 23:14:59]

Done.

+
   DISALLOW_COPY_AND_ASSIGN(NaClNonSfiBPFSandboxPolicy);
 };