Apply renderer sandbox to utility processes.

content/common/sandbox_linux/bpf_utility_policy_linux.h

Index: content/common/sandbox_linux/bpf_utility_policy_linux.h
diff --git a/content/common/sandbox_linux/bpf_utility_policy_linux.h b/content/common/sandbox_linux/bpf_utility_policy_linux.h
new file mode 100644
index 0000000000000000000000000000000000000000..9dbb284b9c0e65210b09cc478867c652a7233e61
--- /dev/null
+++ b/content/common/sandbox_linux/bpf_utility_policy_linux.h
@@ -0,0 +1,27 @@
+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CONTENT_COMMON_SANDBOX_LINUX_BPF_UTILITY_POLICY_LINUX_H_
+#define CONTENT_COMMON_SANDBOX_LINUX_BPF_UTILITY_POLICY_LINUX_H_
+
+#include "content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h"
+
+namespace content {
+
+// This policy can be used by both utility processes.
+class UtilityProcessPolicy : public SandboxBPFBasePolicy {
+ public:
+  UtilityProcessPolicy();
+  virtual ~UtilityProcessPolicy();
+
+  virtual ErrorCode EvaluateSyscall(SandboxBPF* sandbox_compiler,
+                                    int system_call_number) const OVERRIDE;
+
+ private:
+  DISALLOW_COPY_AND_ASSIGN(UtilityProcessPolicy);
+};
+
+}  // namespace content
+
+#endif  // CONTENT_COMMON_SANDBOX_LINUX_BPF_UTILITY_POLICY_LINUX_H_