WIP: Implement seccomp-bpf sandbox for nacl_helper_nonsfi.

sandbox/sandbox_nacl_nonsfi.gyp

 # Copyright 2015 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     'chromium_code': 1,
   },
   'includes': [
     '../build/common_untrusted.gypi',
@@ skipping 12 matching lines @@
             'build_irt': 0,
             'build_pnacl_newlib': 0,
             'build_nonsfi_helper': 1,
 
             'sources': [
               # This is the subset of linux build target, needed for
               # nacl_helper_nonsfi's sandbox implementation.
               'linux/services/proc_util.cc',
               'linux/services/thread_helpers.cc',
               'linux/suid/client/setuid_sandbox_client.cc',
-              # TODO(hidehiko): Support namespace sandbox and seccomp-bpf
-              # sandbox.
+
+              'linux/bpf_dsl/bpf_dsl.cc',
+              'linux/bpf_dsl/codegen.cc',
+              'linux/bpf_dsl/dump_bpf.cc',
+              'linux/bpf_dsl/policy.cc',
+              'linux/bpf_dsl/policy_compiler.cc',
+              'linux/bpf_dsl/syscall_set.cc',
+              'linux/bpf_dsl/verifier.cc',
+              'linux/seccomp-bpf-helpers/sigsys_handlers.cc',
+              'linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc',
+              'linux/seccomp-bpf/die.cc',
+              'linux/seccomp-bpf/errorcode.cc',
+              'linux/seccomp-bpf/sandbox_bpf.cc',
+              'linux/seccomp-bpf/syscall.cc',
+              'linux/seccomp-bpf/trap.cc',
+              'linux/services/resource_limits.cc',
+              'linux/services/syscall_wrappers.cc',
+              # TODO(hidehiko): Support namespace sandbox.
             ],
           },
           'dependencies': [
             '../base/base_nacl.gyp:base_nacl_nonsfi',
             '../native_client/tools.gyp:prep_toolchain',
           ],
         },
       ],
     }],
   ],
 }