Make //sandbox/* pass gn check (and make it gn checked).

sandbox/linux/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//build/config/nacl/config.gni")
 import("//testing/test.gni")
 
 # |is_nacl_nonsfi| is not used in Mojo builds.
 assert(!defined(is_nacl_nonsfi))
@@ skipping 48 matching lines @@
     "tests/sandbox_test_runner.h",
     "tests/sandbox_test_runner_function_pointer.cc",
     "tests/sandbox_test_runner_function_pointer.h",
     "tests/test_utils.cc",
     "tests/test_utils.h",
     "tests/unit_tests.cc",
     "tests/unit_tests.h",
   ]
 
   deps = [
+    "//base/third_party/dynamic_annotations",
     "//testing/gtest",
   ]
 
   if (use_seccomp_bpf) {
     sources += [
       "seccomp-bpf/bpf_tester_compatibility_delegate.h",
       "seccomp-bpf/bpf_tests.h",
       "seccomp-bpf/sandbox_bpf_test_runner.cc",
       "seccomp-bpf/sandbox_bpf_test_runner.h",
     ]
@@ skipping 24 matching lines @@
     "tests/scoped_temporary_file.h",
     "tests/scoped_temporary_file_unittest.cc",
     "tests/test_utils_unittest.cc",
     "tests/unit_tests_unittest.cc",
   ]
 
   deps = [
     ":sandbox",
     ":sandbox_linux_test_utils",
     "//base",
+    "//base/third_party/dynamic_annotations",
     "//testing/gtest",
   ]
 
   if (use_base_test_suite) {
     deps += [ "//base/test:test_support" ]
     defines = [ "SANDBOX_USES_BASE_TEST_SUITE" ]
   }
 
   if (is_linux) {
     # Don't use this on Android.
     libs = [ "rt" ]
   }
 
   if (compile_suid_client) {
     sources += [
       "suid/client/setuid_sandbox_client_unittest.cc",
       "suid/client/setuid_sandbox_host_unittest.cc",
     ]
+    deps += [ ":suid_sandbox_client" ]
   }
   if (use_seccomp_bpf) {
     sources += [
       "bpf_dsl/bpf_dsl_unittest.cc",
       "bpf_dsl/codegen_unittest.cc",
       "bpf_dsl/cons_unittest.cc",
       "bpf_dsl/dump_bpf.cc",
       "bpf_dsl/dump_bpf.h",
       "bpf_dsl/syscall_set_unittest.cc",
       "bpf_dsl/test_trap_registry.cc",
       "bpf_dsl/test_trap_registry.h",
       "bpf_dsl/test_trap_registry_unittest.cc",
       "bpf_dsl/verifier.cc",
       "bpf_dsl/verifier.h",
       "integration_tests/bpf_dsl_seccomp_unittest.cc",
       "integration_tests/seccomp_broker_process_unittest.cc",
       "seccomp-bpf-helpers/baseline_policy_unittest.cc",
       "seccomp-bpf-helpers/syscall_parameters_restrictions_unittests.cc",
       "seccomp-bpf/bpf_tests_unittest.cc",
       "seccomp-bpf/sandbox_bpf_unittest.cc",
       "seccomp-bpf/syscall_unittest.cc",
       "seccomp-bpf/trap_unittest.cc",
     ]
-    deps += [ ":bpf_dsl_golden" ]
+    deps += [
+      ":bpf_dsl_golden",
+      ":sandbox_services_headers",
+      ":seccomp_bpf",
+      ":seccomp_bpf_helpers",
+    ]
   }
   if (compile_credentials) {
     sources += [
       "integration_tests/namespace_unix_domain_socket_unittest.cc",
       "services/credentials_unittest.cc",
       "services/namespace_utils_unittest.cc",
     ]
+    deps += [ ":sandbox_services" ]
 
     if (use_base_test_suite) {
       # Tests that use advanced features not available in stock GTest.
       sources += [ "services/namespace_sandbox_unittest.cc" ]
     }
 
     # For credentials_unittest.cc
     configs += [ "//build/config/linux:libcap" ]
   }
 }
@@ skipping 71 matching lines @@
     "seccomp-bpf/syscall.h",
     "seccomp-bpf/trap.cc",
     "seccomp-bpf/trap.h",
   ]
   defines = [ "SANDBOX_IMPLEMENTATION" ]
 
   deps = [
     ":sandbox_services",
     ":sandbox_services_headers",
     "//base",
+    "//base/third_party/dynamic_annotations",
   ]
 
   if (is_nacl_nonsfi) {
     cflags = [ "-fgnu-inline-asm" ]
     sources -= [
       "bpf_dsl/bpf_dsl_forward.h",
       "bpf_dsl/bpf_dsl_impl.h",
       "bpf_dsl/cons.h",
       "bpf_dsl/errorcode.h",
       "bpf_dsl/linux_syscall_ranges.h",
@@ skipping 11 matching lines @@
     "seccomp-bpf-helpers/sigsys_handlers.h",
     "seccomp-bpf-helpers/syscall_parameters_restrictions.cc",
     "seccomp-bpf-helpers/syscall_parameters_restrictions.h",
     "seccomp-bpf-helpers/syscall_sets.cc",
     "seccomp-bpf-helpers/syscall_sets.h",
   ]
   defines = [ "SANDBOX_IMPLEMENTATION" ]
 
   deps = [
     ":sandbox_services",
+    ":sandbox_services_headers",
     ":seccomp_bpf",
     "//base",
   ]
 
   if (is_nacl_nonsfi) {
     sources -= [
       "seccomp-bpf-helpers/baseline_policy.cc",
       "seccomp-bpf-helpers/baseline_policy.h",
       "seccomp-bpf-helpers/syscall_sets.cc",
       "seccomp-bpf-helpers/syscall_sets.h",
@@ skipping 56 matching lines @@
     "syscall_broker/broker_policy.cc",
     "syscall_broker/broker_policy.h",
     "syscall_broker/broker_process.cc",
     "syscall_broker/broker_process.h",
   ]
 
   defines = [ "SANDBOX_IMPLEMENTATION" ]
 
   deps = [
     "//base",
+    "//base/third_party/dynamic_annotations",
   ]
 
   if (compile_credentials || is_nacl_nonsfi) {
     sources += [
       "services/credentials.cc",
       "services/credentials.h",
       "services/namespace_sandbox.cc",
       "services/namespace_sandbox.h",
       "services/namespace_utils.cc",
       "services/namespace_utils.h",
@@ skipping 89 matching lines @@
     }
   }
 
   test_runner_script("sandbox_linux_unittests__test_runner_script") {
     test_name = "sandbox_linux_unittests"
     test_type = "gtest"
     test_suite = "sandbox_linux_unittests"
     isolate_file = "//sandbox/sandbox_linux_unittests_android.isolate"
   }
 }