Non-SFI NaCl: Disallow epoll family and allow poll instead

components/nacl/loader/nonsfi/nonsfi_sandbox_unittest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h"
 
 #include <errno.h>
 #include <fcntl.h>
 #include <pthread.h>
 #include <sched.h>
@@ skipping 328 matching lines @@
          nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) {
   char* next_brk = static_cast<char*>(sbrk(0)) + getpagesize();
   // The kernel interface must return zero for brk.
   BPF_ASSERT_EQ(0, syscall(__NR_brk, next_brk));
   // The libc wrapper translates it to ENOMEM.
   errno = 0;
   BPF_ASSERT_EQ(-1, brk(next_brk));
   BPF_ASSERT_EQ(ENOMEM, errno);
 }
 
+BPF_TEST(NaClNonSfiSandboxTest, epoll_create_EPERM,
+         nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) {
+  errno = 0;
+  BPF_ASSERT_EQ(-1, syscall(__NR_epoll_create));
+  BPF_ASSERT_EQ(EPERM, errno);
+}
+
 #if defined(__i386__) || defined(__arm__)
 BPF_TEST(NaClNonSfiSandboxTest, getegid32_EPERM,
          nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) {
   errno = 0;
   BPF_ASSERT_EQ(-1, syscall(__NR_getegid32));
   BPF_ASSERT_EQ(EPERM, errno);
 }
 
 BPF_TEST(NaClNonSfiSandboxTest, geteuid32_EPERM,
          nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) {
@@ skipping 123 matching lines @@
 #if defined(__i386__) || defined(__x86_64__)
 BPF_TEST(NaClNonSfiSandboxTest, time_EPERM,
          nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) {
   errno = 0;
   BPF_ASSERT_EQ(-1, syscall(__NR_time));
   BPF_ASSERT_EQ(EPERM, errno);
 }
 #endif
 
 }  // namespace