Linux: make current InitializeSandbox() private.

content/common/sandbox_linux.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_COMMON_SANDBOX_LINUX_H_
 #define CONTENT_COMMON_SANDBOX_LINUX_H_
 
 #include <string>
 
 #include "base/basictypes.h"
@@ skipping 34 matching lines @@
   // process type (this is for instance the case with the Zygote).
   // In that case, it is crucial that PreinitializeSandboxFinish() gets
   // called for every child process.
   // TODO(markus, jln) we know this is not always done at the moment
   // (crbug.com/139877).
   void PreinitializeSandbox(const std::string& process_type);
   // These should be called together.
   void PreinitializeSandboxBegin();
   void PreinitializeSandboxFinish(const std::string& process_type);
 
-  // Returns the Status of the sandbox. Can only be queried if we went through
-  // PreinitializeSandbox() or PreinitializeSandboxBegin(). This is a bitmask
-  // and uses the constants defined in "enum LinuxSandboxStatus".
+  // Initialize the sandbox with the given pre-built configuration. Currently
+  // seccomp-legacy, seccomp-bpf, address space limitations (the setuid sandbox
+  // works differently and is set-up in the Zygote). This will instantiate the
+  // LinuxSandbox singleton if it doesn't already exist.
+  static bool InitializeSandbox();
+
+  // Returns the Status of the renderers' sandbox. Can only be queried if we
+  // went through PreinitializeSandbox() or PreinitializeSandboxBegin(). This
+  // is a bitmask and uses the constants defined in "enum LinuxSandboxStatus".
   // Since we need to provide the status before the sandboxes are actually
   // started, this returns what will actually happen once the various Start*
   // functions are called from inside a renderer.
   int GetStatus() const;
   // Is the current process single threaded?
   bool IsSingleThreaded() const;
   // Did we start Seccomp BPF?
   bool seccomp_bpf_started() const;
 
   // Simple accessor for our instance of the setuid sandbox. Will never return
@@ skipping 29 matching lines @@
   scoped_ptr<sandbox::SetuidSandboxClient> setuid_sandbox_client_;
 
   ~LinuxSandbox();
   DISALLOW_IMPLICIT_CONSTRUCTORS(LinuxSandbox);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_COMMON_SANDBOX_LINUX_H_