Add a whitelist check for nacl-nonsfi mode

components/nacl/renderer/ppb_nacl_private_impl.cc

Index: components/nacl/renderer/ppb_nacl_private_impl.cc
diff --git a/components/nacl/renderer/ppb_nacl_private_impl.cc b/components/nacl/renderer/ppb_nacl_private_impl.cc
index 3361f61783c86f485bdf6ae9bcb5224e1ec5a44a..e44e202a6884c3f45aa87c810fabcab3a6b003fe 100644
--- a/components/nacl/renderer/ppb_nacl_private_impl.cc
+++ b/components/nacl/renderer/ppb_nacl_private_impl.cc
@@ -522,7 +522,13 @@ int32_t GetNumberOfProcessors() {
 }
 
 PP_Bool IsNonSFIModeEnabled() {
-#if defined(OS_LINUX)
+  // Note that this only indicates whether non-sfi mode *can* run for a given
+  // platform and if nonsfi manifest entries are preferred.  There can be other
+  // restrictions which prevent a particular module from launching.  See
+  // NaClProcessHost::Launch which makes the final determination.
+#if defined(OS_CHROMEOS) && defined(ARCH_CPU_ARMEL)
+  return PP_TRUE;
+#elif defined(OS_LINUX)
   return PP_FromBool(CommandLine::ForCurrentProcess()->HasSwitch(
                          switches::kEnableNaClNonSfiMode));
 #else