Linux sandbox: change API to start the sandbox

content/common/sandbox_linux/bpf_gpu_policy_linux.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_linux/bpf_gpu_policy_linux.h"
 
 #include <dlfcn.h>
 #include <errno.h>
 #include <fcntl.h>
 #include <sys/socket.h>
@@ skipping 147 matching lines @@
   // SetProcessTitleFromCommandLine in content_main_runner.cc, so we can pass
   // NULL here (we don't have the original argv at this point).
   SetProcessTitleFromCommandLine(NULL);
 }
 
 bool UpdateProcessTypeAndEnableSandbox(
     sandbox::bpf_dsl::Policy* (*broker_sandboxer_allocator)(void)) {
   DCHECK(broker_sandboxer_allocator);
   UpdateProcessTypeToGpuBroker();
   return SandboxSeccompBPF::StartSandboxWithExternalPolicy(
-      make_scoped_ptr(broker_sandboxer_allocator()));
+      make_scoped_ptr(broker_sandboxer_allocator()), base::ScopedFD(-1));

[mdempsky, 2014/11/24 21:58:23]

I think you can just use base::ScopedFD() instead of base::ScopedFD(-1)?

[jln (very slow on Chromium), 2014/11/24 22:45:48]

Done.

 }
 
 }  // namespace
 
 GpuProcessPolicy::GpuProcessPolicy() : GpuProcessPolicy(false) {
 }
 
 GpuProcessPolicy::GpuProcessPolicy(bool allow_mincore)
     : broker_process_(NULL), allow_mincore_(allow_mincore) {
 }
@@ skipping 104 matching lines @@
   broker_process_ = new BrokerProcess(GetFSDeniedErrno(),
                                       read_whitelist,
                                       write_whitelist);
   // The initialization callback will perform generic initialization and then
   // call broker_sandboxer_callback.
   CHECK(broker_process_->Init(base::Bind(&UpdateProcessTypeAndEnableSandbox,
                                          broker_sandboxer_allocator)));
 }
 
 }  // namespace content