[Android] Define a baseline seccomp-bpf sandbox policy.

content/content_common.gypi

 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'dependencies': [
     '../base/base.gyp:base',
     '../components/tracing.gyp:tracing',
     '../gpu/command_buffer/command_buffer.gyp:gles2_utils',
     '../net/net.gyp:net',
@@ skipping 374 matching lines @@
     'common/process_type.cc',
     'common/push_messaging_messages.h',
     'common/quota_messages.h',
     'common/resource_messages.cc',
     'common/resource_messages.h',
     'common/resource_request_body.cc',
     'common/resource_request_body.h',
     'common/sandbox_init_mac.cc',
     'common/sandbox_init_mac.h',
     'common/sandbox_init_win.cc',
+    'common/sandbox_linux/android/sandbox_bpf_base_policy_android.cc',
+    'common/sandbox_linux/android/sandbox_bpf_base_policy_android.h',
     'common/sandbox_linux/bpf_cros_arm_gpu_policy_linux.cc',
     'common/sandbox_linux/bpf_cros_arm_gpu_policy_linux.h',
     'common/sandbox_linux/bpf_gpu_policy_linux.cc',
     'common/sandbox_linux/bpf_gpu_policy_linux.h',
     'common/sandbox_linux/bpf_ppapi_policy_linux.cc',
     'common/sandbox_linux/bpf_ppapi_policy_linux.h',
     'common/sandbox_linux/bpf_renderer_policy_linux.cc',
     'common/sandbox_linux/bpf_renderer_policy_linux.h',
     'common/sandbox_linux/sandbox_bpf_base_policy_linux.cc',
     'common/sandbox_linux/sandbox_bpf_base_policy_linux.h',
@@ skipping 39 matching lines @@
     'common/view_messages.h',
     'common/webplugin_geometry.cc',
     'common/webplugin_geometry.h',
     'common/websocket.cc',
     'common/websocket.h',
     'common/websocket_messages.h',
     'common/worker_messages.h',
     'common/zygote_commands_linux.h',
     'port/common/input_event_ack_state.h',
   ],
+  'target_conditions': [
+    ['OS=="android"', {
+      'sources/': [
+        ['include', '^common/sandbox_linux/sandbox_bpf_base_policy_linux\\.cc$'],
+        ['include', '^common/sandbox_linux/sandbox_bpf_base_policy_linux\\.h$'],
+      ],
+    }],
+  ],
   'conditions': [
     ['use_aura==1', {
       'sources!': [
         'common/cursors/webcursor_mac.mm',
         'common/cursors/webcursor_win.cc',
       ],
     }],
     ['OS=="ios"', {
       # iOS has different user-agent construction utilities, since the
       # version strings is not derived from webkit_version, and follows
@@ skipping 284 matching lines @@
         'common/sandbox_linux/bpf_renderer_policy_linux.cc',
         'common/sandbox_linux/bpf_renderer_policy_linux.h',
         'common/sandbox_linux/sandbox_bpf_base_policy_linux.cc',
         'common/sandbox_linux/sandbox_bpf_base_policy_linux.h',
       ],
     }, {
       'defines': ['USE_SECCOMP_BPF'],
     }],
   ],
 }