Add an initial Linux GPU sandbox using the seccomp filter framework.

content/public/common/sandbox_init.h

Index: content/public/common/sandbox_init.h
===================================================================
--- content/public/common/sandbox_init.h	(revision 131872)
+++ content/public/common/sandbox_init.h	(working copy)
@@ -46,6 +46,8 @@
 // taken and true is always returned.
 CONTENT_EXPORT bool InitializeSandbox(int sandbox_type,
                                       const FilePath& allowed_path);
+#elif defined(OS_LINUX)
+CONTENT_EXPORT void InitializeSandbox();

[jam, 2012/04/13 05:57:58]

since this isn't called by outside content, it doesn't need to be exposed in the
public api. can you just put this in a sandbox_init_linux.h beside the new cc
file?

 #endif
 
 }  // namespace content