Linux sandbox: componentize almost everything.

sandbox/linux/seccomp-bpf-helpers/syscall_sets.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SYSCALL_SETS_H_
 #define SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SYSCALL_SETS_H_
 
 #include "base/basictypes.h"
 #include "build/build_config.h"
+#include "sandbox/linux/sandbox_export.h"
 
 // These are helpers to build seccomp-bpf policies, i.e. policies for a
 // sandbox that reduces the Linux kernel's attack surface. Given their
 // nature, they don't have any clear semantics and are completely
 // "implementation-defined".
 
 namespace sandbox {
 
-class SyscallSets {
+class SANDBOX_EXPORT SyscallSets {
  public:
   static bool IsKill(int sysno);
   static bool IsAllowedGettime(int sysno);
   static bool IsCurrentDirectory(int sysno);
   static bool IsUmask(int sysno);
   // System calls that directly access the file system. They might acquire
   // a new file descriptor or otherwise perform an operation directly
   // via a path.
   static bool IsFileSystem(int sysno);
   static bool IsAllowedFileSystemAccessViaFd(int sysno);
@@ skipping 67 matching lines @@
   static bool IsArmPciConfig(int sysno);
   static bool IsArmPrivate(int sysno);
 #endif  // defined(__arm__)
  private:
   DISALLOW_IMPLICIT_CONSTRUCTORS(SyscallSets);
 };
 
 }  // namespace sandbox.
 
 #endif  // SANDBOX_LINUX_SECCOMP_BPF_HELPERS_SYSCALL_SETS_H_