Non-SFI mode:Suid sandbox.

sandbox/sandbox_nacl_nonsfi.gyp

Index: sandbox/sandbox_nacl_nonsfi.gyp
diff --git a/content/content_nacl_nonsfi.gyp b/sandbox/sandbox_nacl_nonsfi.gyp
similarity index 70%
copy from content/content_nacl_nonsfi.gyp
copy to sandbox/sandbox_nacl_nonsfi.gyp
index 28b44e380d3d5fa2c1056ee096fa5e2aee1d5557..3c9bbdc36b779e771fc5a4142726f48935a17dd5 100644
--- a/content/content_nacl_nonsfi.gyp
+++ b/sandbox/sandbox_nacl_nonsfi.gyp
@@ -1,4 +1,4 @@
-# Copyright 2014 The Chromium Authors. All rights reserved.
+# Copyright 2015 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
@@ -13,11 +13,11 @@
     ['disable_nacl==0 and disable_nacl_untrusted==0', {
       'targets': [
         {
-          'target_name': 'content_common_nacl_nonsfi',
+          'target_name': 'sandbox_nacl_nonsfi',
           'type': 'none',
           'variables': {
             'nacl_untrusted_build': 1,
-            'nlib_target': 'libcontent_common_nacl_nonsfi.a',
+            'nlib_target': 'libsandbox_nacl_nonsfi.a',
             'build_glibc': 0,
             'build_newlib': 0,
             'build_irt': 0,
@@ -25,9 +25,9 @@
             'build_nonsfi_helper': 1,
 
             'sources': [
-              'common/send_zygote_child_ping_linux.cc',
-              'public/common/send_zygote_child_ping_linux.h',
-              # TODO(hidehiko): Add sandbox code.

[Mark Seaborn, 2015/02/06 20:15:03]

So Git regards this file as copied from content/content_nacl_nonsfi.gyp.  Should
you remove this TODO comment from there?  I'm guessing that the new
sandbox_nacl_nonsfi.gyp covers the sandbox code that this TODO comment referred
to.

[mdempsky, 2015/02/09 06:12:39]

I think the comment may be referring to content/common/sandbox_linux, some of
which will be needed for setting up the layer-2 sandbox (seccomp-bpf).

[hidehiko, 2015/03/02 19:16:25]

Yes, and some content/public/common files, too.

+              'linux/services/proc_util.cc',
+              'linux/services/thread_helpers.cc',
+              'linux/suid/client/setuid_sandbox_client.cc',
             ],
           },
           'dependencies': [