Support running NaCl in Chromium's Linux SUID sandbox

src/shared/imc/nacl_imc_unistd.cc

Index: src/shared/imc/nacl_imc_unistd.cc
diff --git a/src/shared/imc/nacl_imc_unistd.cc b/src/shared/imc/nacl_imc_unistd.cc
index 49bf44274deca016dafc08a58002d1f03d800a0e..250ca1cd1936c5f85ae57d992a0bf8faf70d2c67 100644
--- a/src/shared/imc/nacl_imc_unistd.cc
+++ b/src/shared/imc/nacl_imc_unistd.cc
@@ -32,6 +32,10 @@
 
 #include "native_client/src/shared/imc/nacl_imc.h"
 
+#if defined(CHROMIUM_BUILD) && NACL_LINUX
+#include "chrome/renderer/renderer_sandbox_support_linux.h"
+#endif
+
 namespace nacl {
 
 namespace {
@@ -86,6 +90,9 @@ Handle CreateMemoryObject(size_t length) {
       return m;
     }
     if (errno != EEXIST) {
+#if defined(CHROMIUM_BUILD) && NACL_LINUX
+      return MakeSharedMemorySegmentViaIPC(length);

[gregoryd, 2010/03/04 17:37:45]

Do we know that shm_open will fail in the sandbox? If so, why do we try and not
call MakeSharedMemorySegmentViaIPC?

+#endif
       return -1;
     }
   }