Add a whitelist check for nacl-nonsfi mode

components/nacl/renderer/ppb_nacl_private_impl.cc

Index: components/nacl/renderer/ppb_nacl_private_impl.cc
diff --git a/components/nacl/renderer/ppb_nacl_private_impl.cc b/components/nacl/renderer/ppb_nacl_private_impl.cc
index 3361f61783c86f485bdf6ae9bcb5224e1ec5a44a..125fc5e2cf9d93e2edb0d04ff4d7b60ef85f085f 100644
--- a/components/nacl/renderer/ppb_nacl_private_impl.cc
+++ b/components/nacl/renderer/ppb_nacl_private_impl.cc
@@ -522,7 +522,13 @@ int32_t GetNumberOfProcessors() {
 }
 
 PP_Bool IsNonSFIModeEnabled() {
-#if defined(OS_LINUX)
+// Note that this only indicates whether non-sfi mode *can* run for a given
+// platform and if nonsfi manifest entries are preferred.  There can be other
+// restrictions which prevent a particular module from launching.  See
+// NaClProcessHost::Launch which makes the final determination.
+#if defined(OS_CHROMEOS) && defined(ARCH_CPU_ARMEL)
+  return PP_TRUE;
+#elif defined(OS_LINUX)
   return PP_FromBool(CommandLine::ForCurrentProcess()->HasSwitch(
                          switches::kEnableNaClNonSfiMode));
 #else