Linux sandbox: Allow restricting sched_* on other processes.

content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h

Index: content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
diff --git a/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h b/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
index 7f3b8946943895408aede338e5b35a3f6a95a3f8..33c826382410010b01c1d94f6a52f91b0d16e2c5 100644
--- a/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
+++ b/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
@@ -36,6 +36,9 @@ class SandboxBPFBasePolicy : public sandbox::bpf_dsl::SandboxBPFDSLPolicy {
   // Get the errno(3) to return for filesystem errors.
   static int GetFSDeniedErrno();
 
+  // Returns the pid of the process being sandboxed.
+  pid_t GetCurrentPid() const;

[jln (very slow on Chromium), 2014/09/22 21:56:44]

I don't think you need this here. We can add it when it starts becoming required
perhaps?

[rickyz (no longer on Chrome), 2014/09/23 06:03:20]

Done.

+
  private:
   // Compose the BaselinePolicy from sandbox/.
   scoped_ptr<sandbox::BaselinePolicy> baseline_policy_;