Make clone(2) restrictions work on ARM.

Make clone(2) restrictions work on ARM.

Fix some style nits while there.

TEST=Robot Unicorn Attack.
BUG=

Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=203049

[Jorge Lucangeli Obes, 2013-05-29 17:51:00]

Weird combination of flags, but fixes ARM.

[Chris Evans, 2013-05-29 19:54:12]

LGTM with notes.

https://chromiumcodereview.appspot.com/15990006/diff/4001/content/common/sand...
File content/common/sandbox_seccomp_bpf_linux.cc (right):

https://chromiumcodereview.appspot.com/15990006/diff/4001/content/common/sand...
content/common/sandbox_seccomp_bpf_linux.cc:1251: ErrorCode
RestrictMmapFlags(Sandbox* sandbox) {
There's quite a bit of style cleanup in this patch. Generally, it's nice to
separate these into separate CLs from functional changes but we can let it slide
this time ;-)

https://chromiumcodereview.appspot.com/15990006/diff/4001/content/common/sand...
content/common/sandbox_seccomp_bpf_linux.cc:1599: case __NR_clone:
Do you hapen to have a 32-bit Chrome OS build handy to confirm it's ok?

[Jorge Lucangeli Obes, 2013-05-29 19:57:22]

https://chromiumcodereview.appspot.com/15990006/diff/4001/content/common/sand...
File content/common/sandbox_seccomp_bpf_linux.cc (right):

https://chromiumcodereview.appspot.com/15990006/diff/4001/content/common/sand...
content/common/sandbox_seccomp_bpf_linux.cc:1599: case __NR_clone:
On 2013/05/29 19:54:13, Chris Evans wrote:
> Do you hapen to have a 32-bit Chrome OS build handy to confirm it's ok?

Yeah, I tested both x86 and ARM.

[jln (very slow on Chromium), 2013-05-29 20:17:16]

lgtm

[commit-bot: I haz the power, 2013-05-29 20:25:21]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/jorgelo@chromium.org/15990006/4001

[commit-bot: I haz the power, 2013-05-30 03:47:05]

Change committed as 203049