Support running NaCl in Chromium's Linux SUID sandbox

src/shared/platform/linux/nacl_secure_random.c

 /*
  * Copyright 2008 The Native Client Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can
  * be found in the LICENSE file.
  */
 
 /*
  * NaCl Service Runtime.  Secure RNG implementation.
  */
 
@@ skipping 106 matching lines @@
 }
 
 #else
 
 # include <sys/types.h>
 # include <sys/stat.h>
 # include <fcntl.h>
 
 static int             rng_d = -1;  /* open descriptor for /dev/urandom */
 
+# ifdef CHROMIUM_BUILD
+
+# include "base/rand_util_c.h"
+
+void NaClSecureRngModuleInit(void) {
+  rng_d = GetUrandomFD();
+}
+
+void NaClSecureRngModuleFini(void) {
+}
+
+# else
+
 void NaClSecureRngModuleInit(void) {
   rng_d = open(NACL_SECURE_RANDOM_SYSTEM_RANDOM_SOURCE, O_RDONLY, 0);
   if (-1 == rng_d) {
     NaClLog(LOG_FATAL, "Cannot open system random source %s\n",
             NACL_SECURE_RANDOM_SYSTEM_RANDOM_SOURCE);
   }
 }
 
 void NaClSecureRngModuleFini(void) {
   (void) close(rng_d);
 }
 
+# endif /* CHROMIUM_BUILD */
+
 int NaClSecureRngCtor(struct NaClSecureRng *self) {
   self->base.vtbl = &kNaClSecureRngVtbl;
   self->nvalid = 0;
   return 1;
 }
 
 int NaClSecureRngTestingCtor(struct NaClSecureRng *self,
                              uint8_t              *seed_material,
                              size_t               seed_bytes) {
   return 0;
@@ skipping 29 matching lines @@
 
 #endif
 
 static struct NaClSecureRngVtbl const kNaClSecureRngVtbl = {
   NaClSecureRngDtor,
   NaClSecureRngGenByte,
   NaClSecureRngDefaultGenUint32,
   NaClSecureRngDefaultGenBytes,
   NaClSecureRngDefaultUniform,
 };