disable webtry seccmp on non-linux build

disable webtry seccmp on non-linux build

BUG=skia:

Committed: https://skia.googlesource.com/skia/+/d3b6eb246dce5a85c7a17a94e13f8aaca5729111

[humper, 2014-09-09 19:08:13]

humper@google.com changed reviewers:
+ jcgregorio@google.com

[humper, 2014-09-09 19:08:18]

ptal

[mtklein, 2014-09-09 19:11:23]

On 2014/09/09 19:08:18, humper wrote:
> ptal

This seems like not a good idea without an alternative safety net for the
platform.  What are you building this on?

[jcgregorio, 2014-09-09 19:19:06]

On 2014/09/09 19:11:23, mtklein wrote:
> On 2014/09/09 19:08:18, humper wrote:
> > ptal
> 
> This seems like not a good idea without an alternative safety net for the
> platform.  What are you building this on?

Agreed, I think the default should be locked down. Can you reverse the logic,
i.e. rename the flag 
to something like SK_UNSAFE_BUILD_FOR_DESKTOP_ONLY?

[jcgregorio, 2014-09-09 19:19:11]

https://codereview.chromium.org/555993002/diff/1/experimental/webtry/main.cpp
File experimental/webtry/main.cpp (right):

https://codereview.chromium.org/555993002/diff/1/experimental/webtry/main.cpp...
experimental/webtry/main.cpp:15: #
stray?

[humper, 2014-09-09 19:19:34]

On 2014/09/09 19:11:23, mtklein wrote:
> On 2014/09/09 19:08:18, humper wrote:
> > ptal
> 
> This seems like not a good idea without an alternative safety net for the
> platform.  What are you building this on?

Mac -- we're not going to deploy on Mac, but I need to be able to develop it
here.

[humper, 2014-09-09 19:21:23]

https://codereview.chromium.org/555993002/diff/1/experimental/webtry/main.cpp
File experimental/webtry/main.cpp (right):

https://codereview.chromium.org/555993002/diff/1/experimental/webtry/main.cpp...
experimental/webtry/main.cpp:15: #
On 2014/09/09 19:19:11, jcgregorio wrote:
> stray?

Acknowledged.

https://codereview.chromium.org/555993002/diff/1/experimental/webtry/main.cpp...
experimental/webtry/main.cpp:15: #
On 2014/09/09 19:19:11, jcgregorio wrote:
> stray?

Done.

[humper, 2014-09-09 19:23:04]

On 2014/09/09 19:19:06, jcgregorio wrote:
> On 2014/09/09 19:11:23, mtklein wrote:
> > On 2014/09/09 19:08:18, humper wrote:
> > > ptal
> > 
> > This seems like not a good idea without an alternative safety net for the
> > platform.  What are you building this on?
> 
> Agreed, I think the default should be locked down. Can you reverse the logic,
> i.e. rename the flag 
> to something like SK_UNSAFE_BUILD_FOR_DESKTOP_ONLY?

Sure, I mean right now the default is "doesn't build", which is probably the
most secure of all.  I'll add the newly named flag as you suggested.

[humper, 2014-09-09 19:29:42]

new flag created; once these patches land I'll start rejiggering how we build
the actual user-supplied program to be more portable.

[jcgregorio, 2014-09-09 19:31:16]

On 2014/09/09 19:29:42, humper wrote:
> new flag created; once these patches land I'll start rejiggering how we build
> the actual user-supplied program to be more portable.

LGTM

[humper, 2014-09-09 22:48:57]

The CQ bit was checked by humper@google.com

[commit-bot: I haz the power, 2014-09-09 22:49:59]

CQ is trying da patch. Follow status at
 https://skia-tree-status.appspot.com/cq/humper@google.com/555993002/40001

[commit-bot: I haz the power, 2014-09-09 22:57:36]

Committed patchset #3 (id:40001) as d3b6eb246dce5a85c7a17a94e13f8aaca5729111