Add check for file system access to the sandbox.

chrome/common/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/util/process_version.gni")
 import("//chrome/common/features.gni")
 import("//chrome/process_version_rc_template.gni")  # For branding_file_path.
 import("//mojo/public/tools/bindings/mojom.gni")
 import("//tools/grit/grit_rule.gni")
@@ skipping 492 matching lines @@
         "safe_browsing/zip_analyzer.h",
         "safe_browsing/zip_analyzer_results.cc",
         "safe_browsing/zip_analyzer_results.h",
       ]
     }
   }
 
   if (enable_vr_shell) {
     defines += [ "ENABLE_VR_SHELL" ]
   }
+
+  if (is_linux) {
+    deps = [
+      "//sandbox/linux:sandbox_services",
+    ]
+  }
 }
 
 process_version("version_header") {
   # TODO(brettw) this should have more reduced visibility, but chrome/browser
   # currently depends on this.
   #visibility = [ ":*" ]
 
   sources = [
     "//build/util/LASTCHANGE",
     "//chrome/VERSION",
@@ skipping 131 matching lines @@
     "shell_handler_win.mojom",
   ]
 
   public_deps = [
     "//skia/public/interfaces",
     "//url/mojo:url_mojom_gurl",
   ]
 
   use_new_wrapper_types = false
 }