Sandbox html_viewer on Linux.

mojo/runner/linux_sandbox.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "mojo/runner/linux_sandbox.h"
 
 #include <fcntl.h>
 #include <sys/syscall.h>
 
 #include "base/bind.h"
@@ skipping 74 matching lines @@
  private:
   // Not owned.
   const sandbox::syscall_broker::BrokerProcess* broker_process_;
   DISALLOW_COPY_AND_ASSIGN(SandboxPolicy);
 };
 
 }  // namespace
 
 LinuxSandbox::LinuxSandbox(const std::vector<BrokerFilePermission>& permissions)
     : broker_(new sandbox::syscall_broker::BrokerProcess(EPERM, permissions)) {
-  broker_->Init(
-      base::Bind<bool (*)()>(&sandbox::Credentials::DropAllCapabilities));
+  CHECK(broker_->Init(
+      base::Bind<bool (*)()>(&sandbox::Credentials::DropAllCapabilities)));
   policy_.reset(new SandboxPolicy(broker_.get()));
 }
 
 LinuxSandbox::~LinuxSandbox() {}
 
 void LinuxSandbox::Warmup() {
   proc_fd_ = sandbox::ProcUtil::OpenProc();
   warmed_up_ = true;
 
   // Verify that we haven't started threads or grabbed directory file
@@ skipping 25 matching lines @@
   // The Broker is now bound to this process and should only be destroyed when
   // the process exits or is killed.
   ANNOTATE_LEAKING_OBJECT_PTR(broker_.release());
 }
 
 void LinuxSandbox::Seal() {
   proc_fd_.reset();
 }
 
 }  // namespace mandoline