Build nacl_helper_nonsfi with GN

sandbox/linux/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
+import("//build/config/nacl/config.gni")
 import("//testing/test.gni")
 
 declare_args() {
   compile_suid_client = is_linux
 
   compile_credentials = is_linux
 
   # On Android, use plain GTest.
   use_base_test_suite = is_linux
 }
@@ skipping 388 matching lines @@
   #      'type': 'none',
   #      'variables': {
   #        'test_suite_name': 'sandbox_linux_jni_unittests',
   #      },
   #      'dependencies': [
   #        'sandbox_linux_jni_unittests',
   #      ],
   #      'includes': [ '../../build/apk_test.gypi' ],
   #      }
 }
+
+if (enable_nacl) {
+  # Must be in a config because of how GN orders flags (otherwise -Wall will
+  # appear after this, and turn it back on).
+  config("clang_warnings") {
+    if (is_nacl_nonsfi) {
+      # There are number of platform specific functions in
+      # seccomp-bpf syscall helpers, which are not being used.
+      cflags = [ "-Wno-unused-function" ]
+    }
+  }
+
+  source_set("sandbox_linux_nacl_nonsfi") {
+    cflags = [ "-fgnu-inline-asm" ]
+    sources = [
+      # This is the subset of linux build target, needed for
+      # nacl_helper_nonsfi's sandbox implementation.
+      "bpf_dsl/bpf_dsl.cc",
+      "bpf_dsl/codegen.cc",
+      "bpf_dsl/policy.cc",
+      "bpf_dsl/policy_compiler.cc",
+      "bpf_dsl/syscall_set.cc",
+      "seccomp-bpf-helpers/sigsys_handlers.cc",
+      "seccomp-bpf-helpers/syscall_parameters_restrictions.cc",
+      "seccomp-bpf/die.cc",
+      "seccomp-bpf/sandbox_bpf.cc",
+      "seccomp-bpf/syscall.cc",
+      "seccomp-bpf/trap.cc",
+      "services/credentials.cc",
+      "services/namespace_sandbox.cc",
+      "services/namespace_utils.cc",
+      "services/proc_util.cc",
+      "services/resource_limits.cc",
+      "services/syscall_wrappers.cc",
+      "services/thread_helpers.cc",
+      "suid/client/setuid_sandbox_client.cc",
+    ]
+
+    configs += [ ":clang_warnings" ]
+  }
+}