Linux: make current InitializeSandbox() private.

content/gpu/gpu_main.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stdlib.h>
 
 #if defined(OS_WIN)
 #include <windows.h>
 #endif
 
 #include "base/debug/trace_event.h"
 #include "base/message_loop.h"
 #include "base/rand_util.h"
 #include "base/string_number_conversions.h"
 #include "base/stringprintf.h"
 #include "base/threading/platform_thread.h"
 #include "build/build_config.h"
 #include "content/common/gpu/gpu_config.h"
+#include "content/common/sandbox_linux.h"
 #include "content/gpu/gpu_child_thread.h"
 #include "content/gpu/gpu_info_collector.h"
 #include "content/gpu/gpu_process.h"
 #include "content/gpu/gpu_watchdog_thread.h"
 #include "content/public/common/content_client.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/common/gpu_switching_option.h"
 #include "content/public/common/main_function_params.h"
 #include "crypto/hmac.h"
 #include "ui/gl/gl_implementation.h"
@@ skipping 195 matching lines @@
     TRACE_EVENT0("gpu", "Initialize sandbox");
     bool do_init_sandbox = true;
 
 #if defined(OS_CHROMEOS) && defined(NDEBUG)
     // On Chrome OS and when not on a debug build, initialize
     // the GPU process' sandbox only for Intel GPUs.
     do_init_sandbox = gpu_info.gpu.vendor_id == 0x8086;   // Intel GPU.
 #endif
 
     if (do_init_sandbox) {
-      if (watchdog_thread.get())
+      if (watchdog_thread.get()) {
         watchdog_thread->Stop();
-      gpu_info.sandboxed = InitializeSandbox();
-      if (watchdog_thread.get())
+      }
+      gpu_info.sandboxed =
+          LinuxSandbox::InitializeSandbox(LinuxSandbox::SANDBOX_CONFIG_GPU);
+      if (watchdog_thread.get()) {
         watchdog_thread->Start();
+      }
     }
   }
 #endif
 
 #if defined(OS_WIN)
   {
     TRACE_EVENT0("gpu", "Lower token");
     // For windows, if the target_services interface is not zero, the process
     // is sandboxed and we must call LowerToken() before rendering untrusted
     // content.
@@ skipping 105 matching lines @@
     TRACE_EVENT0("gpu", "Initialize DXVA");
     // Initialize H/W video decoding stuff which fails in the sandbox.
     DXVAVideoDecodeAccelerator::PreSandboxInitialization();
   }
 #endif
 }
 
 }  // namespace.
 
 }  // namespace content