Linux Sandbox: split the GPU policies to their own file.

content/common/sandbox_seccomp_bpf_linux.h

-// Copyright (c) 2012 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#ifndef CONTENT_COMMON_SANDBOX_SECCOMP_BPF_LINUX_H_
-#define CONTENT_COMMON_SANDBOX_SECCOMP_BPF_LINUX_H_
-
-#include <string>
-
-#include "base/basictypes.h"
-#include "base/memory/scoped_ptr.h"
-
-namespace sandbox {
-class SandboxBPFPolicy;
-}
-
-namespace content {
-
-// This class has two main sets of APIs. One can be used to start the sandbox
-// for internal content process types, the other is indirectly exposed as
-// a public content/ API and uses a supplied policy.
-class SandboxSeccompBPF {
- public:
-  // This is the API to enable a seccomp-bpf sandbox for content/
-  // process-types:
-  // Is the sandbox globally enabled, can anything use it at all ?
-  // This looks at global command line flags to see if the sandbox
-  // should be enabled at all.
-  static bool IsSeccompBPFDesired();
-  // Should the sandbox be enabled for process_type ?
-  static bool ShouldEnableSeccompBPF(const std::string& process_type);
-  // Check if the kernel supports this sandbox. It's useful to "prewarm"
-  // this, part of the result will be cached.
-  static bool SupportsSandbox();
-  // Start the sandbox and apply the policy for process_type, depending on
-  // command line switches.
-  static bool StartSandbox(const std::string& process_type);
-
-  // This is the API to enable a seccomp-bpf sandbox by using an
-  // external policy.
-  static bool StartSandboxWithExternalPolicy(
-      scoped_ptr<sandbox::SandboxBPFPolicy> policy);
-  // The "baseline" policy can be a useful base to build a sandbox policy.
-  static scoped_ptr<sandbox::SandboxBPFPolicy> GetBaselinePolicy();
-
- private:
-  DISALLOW_IMPLICIT_CONSTRUCTORS(SandboxSeccompBPF);
-};
-
-}  // namespace content
-
-#endif  // CONTENT_COMMON_SANDBOX_SECCOMP_BPF_LINUX_H_
-