Allow ugetrlimit() whenever we allow getrlimit() as the calls are pretty

content/common/sandbox_seccomp_bpf_linux.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <asm/unistd.h>
 #include <dlfcn.h>
 #include <errno.h>
 #include <fcntl.h>
 #include <linux/audit.h>
 #include <linux/filter.h>
@@ skipping 855 matching lines @@
     case __NR_mq_unlink:
       return true;
     default:
       return false;
   }
 }
 
 bool IsGlobalProcessEnvironment(int sysno) {
   switch (sysno) {
     case __NR_acct:         // Privileged.
-#if defined(__i386__) || defined(__x86_64__)

[jln (very slow on Chromium), 2013/05/29 03:36:40]

There is no getrlimit on arm. I think this #ifdef was correct?

     case __NR_getrlimit:
-#endif
 #if defined(__i386__) || defined(__arm__)
     case __NR_ugetrlimit:
 #endif
 #if defined(__i386__)
     case __NR_ulimit:
 #endif
     case __NR_getrusage:
     case __NR_personality:  // Can change its personality as well.
     case __NR_prlimit64:    // Like setrlimit / getrlimit.
     case __NR_setrlimit:
@@ skipping 658 matching lines @@
     case __NR_clone:
       return RestrictCloneToThreadsAndEPERMFork(sandbox);
     case __NR_ioctl:
       return RestrictIoctl(sandbox);
     case __NR_prctl:
       return RestrictPrctl(sandbox);
     // Allow the system calls below.
     case __NR_fdatasync:
     case __NR_fsync:
     case __NR_getpriority:
-#if defined(__i386__) || defined(__x86_64__)

[jln (very slow on Chromium), 2013/05/29 03:36:40]

Ditto.

     case __NR_getrlimit:
+#if defined(__i386__) || defined(__arm__)
+    case __NR_ugetrlimit:
 #endif
     case __NR_mremap:   // See crbug.com/149834.
     case __NR_pread64:
     case __NR_pwrite64:
     case __NR_sched_getaffinity:
     case __NR_sched_get_priority_max:
     case __NR_sched_get_priority_min:
     case __NR_sched_getparam:
     case __NR_sched_getscheduler:
     case __NR_sched_setscheduler:
@@ skipping 300 matching lines @@
     // should enable it, enable it or die.
     bool started_sandbox = StartBpfSandbox(command_line, process_type);
     CHECK(started_sandbox);
     return true;
   }
 #endif
   return false;
 }
 
 }  // namespace content