Allow the seccomp sandbox to be enabled, even if the suid sandbox has...

sandbox/linux/seccomp/maps.h

 #ifndef MAPS_H__
 #define MAPS_H__
 
 #include <elf.h>
 #include <string>
 #include <vector>
 
 #if defined(__x86_64__)
 typedef Elf64_Addr Elf_Addr;
 #elif defined(__i386__)
 typedef Elf32_Addr Elf_Addr;
 #else
 #error Undefined target platform
 #endif
 
 namespace playground {
 
 class Library;
 class Maps {
   friend class Library;
  public:
-  Maps(const std::string& maps_file);
+  Maps(int proc_self_maps);
   ~Maps() { }
 
  protected:
   // A map with all the libraries currently loaded into the application.
   // The key is a unique combination of device number, inode number, and
   // file name. It should be treated as opaque.
   typedef std::map<std::string, Library> LibraryMap;
   friend class Iterator;
   class Iterator {
     friend class Maps;
@@ skipping 29 matching lines @@
 
   const_iterator end() {
     return end_iter_;
   }
 
   char* allocNearAddr(char *addr, size_t size, int prot) const;
 
   char* vsyscall() const { return vsyscall_; }
 
  protected:
-  const std::string maps_file_;
-  const Iterator    begin_iter_;
-  const Iterator    end_iter_;
+  const int      proc_self_maps_;
+  const Iterator begin_iter_;
+  const Iterator end_iter_;
 
-  LibraryMap        libs_;
-  char*             vsyscall_;
+  LibraryMap     libs_;
+  char*          vsyscall_;
 };
 
 } // namespace
 
 #endif // MAPS_H__