sandbox: Extend BrokerPolicy to support file creation

sandbox/linux/syscall_broker/broker_process.h

Index: sandbox/linux/syscall_broker/broker_process.h
diff --git a/sandbox/linux/syscall_broker/broker_process.h b/sandbox/linux/syscall_broker/broker_process.h
index d5b521b996c622801eb6f29f760c32bd4617cbb9..1a1a632b43f29d9374f0e2021e9cd44b25c1e64f 100644
--- a/sandbox/linux/syscall_broker/broker_process.h
+++ b/sandbox/linux/syscall_broker/broker_process.h
@@ -20,6 +20,7 @@ namespace sandbox {
 
 namespace syscall_broker {
 class BrokerClient;
+struct BrokerPermission;
 }
 
 // Create a new "broker" process to which we can send requests via an IPC
@@ -42,11 +43,13 @@ class SANDBOX_EXPORT BrokerProcess {
   // A file available read-write should be listed in both.
   // |fast_check_in_client| and |quiet_failures_for_tests| are reserved for
   // unit tests, don't use it.
-  BrokerProcess(int denied_errno,
-                const std::vector<std::string>& allowed_r_files,
-                const std::vector<std::string>& allowed_w_files,
-                bool fast_check_in_client = true,
-                bool quiet_failures_for_tests = false);
+
+  BrokerProcess(
+      int denied_errno,
+      const std::vector<syscall_broker::BrokerPermission>& permissions,
+      bool fast_check_in_client = true,
+      bool quiet_failures_for_tests = false);
+
   ~BrokerProcess();
   // Will initialize the broker process. There should be no threads at this
   // point, since we need to fork().