Revert of Linux Sandbox: split the GPU policies to their own file.

content/common/sandbox_bpf_base_policy_linux.h

+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CONTENT_COMMON_SANDBOX_BPF_BASE_POLICY_LINUX_H_
+#define CONTENT_COMMON_SANDBOX_BPF_BASE_POLICY_LINUX_H_
+
+#include "base/basictypes.h"
+#include "base/memory/scoped_ptr.h"
+#include "sandbox/linux/seccomp-bpf-helpers/baseline_policy.h"
+#include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h"
+
+using sandbox::ErrorCode;
+using sandbox::SandboxBPF;
+
+namespace content {
+
+// The "baseline" BPF policy for content/. Any content/ seccomp-bpf policy
+// should inherit from it.
+// It implements the main SandboxBPFPolicy interface. Due to its nature
+// as a "kernel attack surface reduction" layer, it's implementation-defined.
+class SandboxBPFBasePolicy : public sandbox::SandboxBPFPolicy {
+ public:
+  SandboxBPFBasePolicy();
+  virtual ~SandboxBPFBasePolicy();
+
+  virtual ErrorCode EvaluateSyscall(SandboxBPF* sandbox_compiler,
+                                    int system_call_number) const OVERRIDE;
+  // Get the errno(3) to return for filesystem errors.
+  static int GetFSDeniedErrno();
+
+ private:
+  // Compose the BaselinePolicy from sandbox/.
+  scoped_ptr<sandbox::BaselinePolicy> baseline_policy_;
+  DISALLOW_COPY_AND_ASSIGN(SandboxBPFBasePolicy);
+};
+
+}  // namespace content
+
+#endif  // CONTENT_COMMON_SANDBOX_BPF_BASE_POLICY_LINUX_H_