sandbox: Add Arm64 support for seccomp-BPF

sandbox/linux/seccomp-bpf-helpers/baseline_policy_unittest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/linux/seccomp-bpf-helpers/baseline_policy.h"
 
 #include <errno.h>
 #include <linux/futex.h>
 #include <sched.h>
 #include <signal.h>
@@ skipping 158 matching lines @@
   int sys_ret = socketpair(AF_UNIX, SOCK_DGRAM, 0, sv);
   BPF_ASSERT_EQ(0, sys_ret);
   TestPipeOrSocketPair(base::ScopedFD(sv[0]), base::ScopedFD(sv[1]));
 
   sys_ret = socketpair(AF_UNIX, SOCK_SEQPACKET, 0, sv);
   BPF_ASSERT_EQ(0, sys_ret);
   TestPipeOrSocketPair(base::ScopedFD(sv[0]), base::ScopedFD(sv[1]));
 }
 
 // Not all architectures can restrict the domain for socketpair().
-#if defined(__x86_64__) || defined(__arm__)
+#if defined(__x86_64__) || defined(__arm__) || defined(__aarch64__)
 BPF_DEATH_TEST_C(BaselinePolicy,
                  SocketpairWrongDomain,
                  DEATH_SEGV_MESSAGE(GetErrorMessageContentForTests()),
                  BaselinePolicy) {
   int sv[2];
   ignore_result(socketpair(AF_INET, SOCK_STREAM, 0, sv));
   _exit(1);
 }
-#endif  // defined(__x86_64__) || defined(__arm__)
+#endif  // defined(__x86_64__) || defined(__arm__) || defined(__aarch64__)
 
 BPF_TEST_C(BaselinePolicy, EPERM_open, BaselinePolicy) {
   errno = 0;
   int sys_ret = open("/proc/cpuinfo", O_RDONLY);
   BPF_ASSERT_EQ(-1, sys_ret);
   BPF_ASSERT_EQ(EPERM, errno);
 }
 
 BPF_TEST_C(BaselinePolicy, EPERM_access, BaselinePolicy) {
   errno = 0;
@@ skipping 30 matching lines @@
                    BaselinePolicy) {                                     \
     syscall(sysno, 0, 0, 0, 0, 0, 0);                                    \
     _exit(1);                                                            \
   }
 
 TEST_BASELINE_SIGSYS(__NR_syslog);
 TEST_BASELINE_SIGSYS(__NR_sched_setaffinity);
 TEST_BASELINE_SIGSYS(__NR_timer_create);
 TEST_BASELINE_SIGSYS(__NR_io_cancel);
 TEST_BASELINE_SIGSYS(__NR_ptrace);
+#if !defined(__aarch64__)

[jln (very slow on Chromium), 2014/08/21 19:04:53]

I'm not sure why this list is not sorted (almost certainly my fault).

Let's sort it please, and extract the non aarch64 ones and put them under (after
a vertical whitespace) in a new "section".

[leecam, 2014/08/22 10:44:17]

Done.

 TEST_BASELINE_SIGSYS(__NR_eventfd);
+TEST_BASELINE_SIGSYS(__NR_inotify_init);
+TEST_BASELINE_SIGSYS(__NR_vserver);
+#endif
 TEST_BASELINE_SIGSYS(__NR_fgetxattr);
 TEST_BASELINE_SIGSYS(__NR_fanotify_init);
 TEST_BASELINE_SIGSYS(__NR_swapon);
 TEST_BASELINE_SIGSYS(__NR_chroot);
 TEST_BASELINE_SIGSYS(__NR_acct);
 TEST_BASELINE_SIGSYS(__NR_sysinfo);
-TEST_BASELINE_SIGSYS(__NR_inotify_init);
 TEST_BASELINE_SIGSYS(__NR_init_module);
 TEST_BASELINE_SIGSYS(__NR_keyctl);
 TEST_BASELINE_SIGSYS(__NR_mq_open);
-TEST_BASELINE_SIGSYS(__NR_vserver);
 TEST_BASELINE_SIGSYS(__NR_getcpu);
 TEST_BASELINE_SIGSYS(__NR_setpgid);
 TEST_BASELINE_SIGSYS(__NR_getitimer);
 
 #if !defined(OS_ANDROID)
 BPF_DEATH_TEST_C(BaselinePolicy,
                  FutexWithRequeuePriorityInheritence,
                  DEATH_MESSAGE(GetFutexErrorMessageContentForTests()),
                  BaselinePolicy) {
   syscall(__NR_futex, NULL, FUTEX_CMP_REQUEUE_PI, 0, NULL, NULL, 0);
@@ skipping 25 matching lines @@
                  PrctlSigsys,
                  DEATH_SEGV_MESSAGE(GetPrctlErrorMessageContentForTests()),
                  BaselinePolicy) {
   prctl(PR_CAPBSET_READ, 0, 0, 0, 0);
   _exit(1);
 }
 
 }  // namespace
 
 }  // namespace sandbox