Hook embedded shell up to MojoShellConnection

mojo/shell/runner/host/linux_sandbox.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "mojo/shell/runner/host/linux_sandbox.h"
 
 #include <fcntl.h>
 #include <sys/syscall.h>
 #include <utility>
 
@@ skipping 76 matching lines @@
       case __NR_ftruncate:
 #if defined(__i386__) || defined(__x86_64__) || defined(__mips__)
       // Per #ifdefs in
       // content/common/sandbox_linux/bpf_renderer_policy_linux.cc
       case __NR_getrlimit:
 #endif
 #if defined(__i386__) || defined(__arm__)
       case __NR_ugetrlimit:
 #endif
       case __NR_uname:
+#if defined(__arm__) || defined(__x86_64__) || defined(__mips__)
       case __NR_getsockopt:
       case __NR_setsockopt:
+#endif
         return sandbox::bpf_dsl::Allow();
     }
 
     return BaselinePolicy::EvaluateSyscall(sysno);
   }
 
  private:
   // Not owned.
   const sandbox::syscall_broker::BrokerProcess* broker_process_;
   DISALLOW_COPY_AND_ASSIGN(SandboxPolicy);
@@ skipping 46 matching lines @@
   ALLOW_UNUSED_LOCAL(leaked_broker);
   ANNOTATE_LEAKING_OBJECT_PTR(leaked_broker);
 }
 
 void LinuxSandbox::Seal() {
   proc_fd_.reset();
 }
 
 }  // namespace shell
 }  // namespace mojo