ozone gbm: whitelist 3 DRM ioctl code for native GpuMemoryBuffer.

sandbox/linux/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//testing/test.gni")
 
 declare_args() {
   compile_suid_client = is_linux
 
   compile_credentials = is_linux
 
   # On Android, use plain GTest.
   use_base_test_suite = is_linux
+
+  use_vgem_map = false
 }
 
 # We have two principal targets: sandbox and sandbox_linux_unittests
 # All other targets are listed as dependencies.
 # There is one notable exception: for historical reasons, chrome_sandbox is
 # the setuid sandbox and is its own target.
 
 group("sandbox") {
   deps = [
     ":sandbox_services",
@@ skipping 205 matching lines @@
     "seccomp-bpf-helpers/syscall_sets.cc",
     "seccomp-bpf-helpers/syscall_sets.h",
   ]
   defines = [ "SANDBOX_IMPLEMENTATION" ]
 
   deps = [
     "//base",
     ":sandbox_services",
     ":seccomp_bpf",
   ]
+
+  if (use_vgem_map) {
+    defines += [ "USE_VGEM_MAP" ]
+  }
 }
 
 if (is_linux) {
   # The setuid sandbox for Linux.
   executable("chrome_sandbox") {
     sources = [
       "suid/common/sandbox.h",
       "suid/common/suid_unsafe_environment_variables.h",
       "suid/process_util.h",
       "suid/process_util_linux.c",
@@ skipping 135 matching lines @@
   #      'type': 'none',
   #      'variables': {
   #        'test_suite_name': 'sandbox_linux_jni_unittests',
   #      },
   #      'dependencies': [
   #        'sandbox_linux_jni_unittests',
   #      ],
   #      'includes': [ '../../build/apk_test.gypi' ],
   #      }
 }