Merge 274934 "Linux sandbox: restrict futex operations."

sandbox/linux/seccomp-bpf-helpers/syscall_sets.h

Index: sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
===================================================================
--- sandbox/linux/seccomp-bpf-helpers/syscall_sets.h	(revision 275489)
+++ sandbox/linux/seccomp-bpf-helpers/syscall_sets.h	(working copy)
@@ -37,7 +37,7 @@
   // This should be thought through in conjunction with IsFutex().
   static bool IsAllowedProcessStartOrDeath(int sysno);
   // It's difficult to restrict those, but there is attack surface here.
-  static bool IsFutex(int sysno);
+  static bool IsAllowedFutex(int sysno);
   static bool IsAllowedEpoll(int sysno);
   static bool IsAllowedGetOrModifySocket(int sysno);
   static bool IsDeniedGetOrModifySocket(int sysno);