Non-SFI mode: Sandbox support for NaCl async-signals.

components/nacl/loader/nonsfi/nonsfi_sandbox.h

Index: components/nacl/loader/nonsfi/nonsfi_sandbox.h
diff --git a/components/nacl/loader/nonsfi/nonsfi_sandbox.h b/components/nacl/loader/nonsfi/nonsfi_sandbox.h
index 42952120423857ccd443efc424465090396962e5..44004be66030822d4b76314bcbfe59d14342d15a 100644
--- a/components/nacl/loader/nonsfi/nonsfi_sandbox.h
+++ b/components/nacl/loader/nonsfi/nonsfi_sandbox.h
@@ -18,13 +18,16 @@ namespace nonsfi {
 // depends on seccomp sandbox.
 class NaClNonSfiBPFSandboxPolicy : public sandbox::bpf_dsl::Policy {
  public:
-  explicit NaClNonSfiBPFSandboxPolicy() {}
-  ~NaClNonSfiBPFSandboxPolicy() override {}
+  explicit NaClNonSfiBPFSandboxPolicy();
+  ~NaClNonSfiBPFSandboxPolicy() override;
 
   sandbox::bpf_dsl::ResultExpr EvaluateSyscall(int sysno) const override;
   sandbox::bpf_dsl::ResultExpr InvalidSyscall() const override;
 
  private:
+  // The PID that the policy applies to (should be equal to the current pid).
+  const pid_t policy_pid_;
+
   DISALLOW_COPY_AND_ASSIGN(NaClNonSfiBPFSandboxPolicy);
 };