Linux sandbox: restrict prctl in the baseline.

sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h"
 
 #include "build/build_config.h"
 #include "sandbox/linux/services/linux_syscalls.h"
 
 namespace sandbox {
@@ skipping 528 matching lines @@
 #endif
     case __NR_sendmmsg:  // Could specify destination.
     case __NR_splice:
     case __NR_tee:
     case __NR_vmsplice:
     default:
       return false;
   }
 }
 
-bool SyscallSets::IsAllowedPrctl(int sysno) {
+bool SyscallSets::IsPrctl(int sysno) {
   switch (sysno) {
+#if defined(__x86_64__)
+    case __NR_arch_prctl:
+#endif
     case __NR_prctl:
       return true;
     default:
-#if defined(__x86_64__)
-    case __NR_arch_prctl:
-#endif
       return false;
   }
 }
 
 bool SyscallSets::IsAllowedBasicScheduler(int sysno) {
   switch (sysno) {
     case __NR_sched_yield:
     case __NR_pause:
     case __NR_nanosleep:
       return true;
@@ skipping 404 matching lines @@
     case __ARM_NR_usr26:
     case __ARM_NR_usr32:
       return true;
     default:
       return false;
   }
 }
 #endif  // defined(__arm__)
 
 }  // namespace sandbox.