Linux sandbox: restrict *kill to the current process.

sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h

Index: sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h
diff --git a/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h b/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h
index b8f626aec613c496564fb8a20ac54ab3ca52fe55..a6ca4beb98bb85215519ccb55398b403042aae5e 100644
--- a/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h
+++ b/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h
@@ -38,6 +38,9 @@ SANDBOX_EXPORT intptr_t
 // argument.
 SANDBOX_EXPORT intptr_t
     SIGSYSIoctlFailure(const struct arch_seccomp_data& args, void* aux);
+// The crashing address will be (pid & 0xFFF). Where pid is the first

[Jorge Lucangeli Obes, 2014/04/29 17:01:26]

Nit: ". Where" -> ", where"

[jln (very slow on Chromium), 2014/04/29 18:19:52]

Done.

+// argument.
+intptr_t SIGSYSKillFailure(const struct arch_seccomp_data& args, void* aux);

[Jorge Lucangeli Obes, 2014/04/29 17:01:26]

This doesn't need to be SANDBOX_EXPORT?

[jln (very slow on Chromium), 2014/04/29 18:19:52]

No, this is only liked internally (to the baseline policy) and not used anywhere
else for now.

 
 // Following four functions return substrings of error messages used
 // in the above four functions. They are useful in death tests.