Linux sandbox: Restrict sched_* syscalls on the GPU and ppapi processes.

content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h

Index: content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
diff --git a/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h b/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
index 7f3b8946943895408aede338e5b35a3f6a95a3f8..fedd1425c4e324edcc0d6a92c1366608c85e737e 100644
--- a/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
+++ b/content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h
@@ -36,6 +36,8 @@ class SandboxBPFBasePolicy : public sandbox::bpf_dsl::SandboxBPFDSLPolicy {
   // Get the errno(3) to return for filesystem errors.
   static int GetFSDeniedErrno();
 
+  pid_t GetPolicyPid() const { return baseline_policy_->policy_pid(); }
+
  private:
   // Compose the BaselinePolicy from sandbox/.
   scoped_ptr<sandbox::BaselinePolicy> baseline_policy_;