Linux sandbox: change API to start the sandbox

components/nacl/loader/nonsfi/nonsfi_sandbox.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h"
 
 #include <errno.h>
 #include <fcntl.h>
 #include <linux/futex.h>
 #include <linux/net.h>
@@ skipping 282 matching lines @@
       if (IsGracefullyDenied(sysno))
         return Error(EPERM);
       return CrashSIGSYS();
   }
 }
 
 ResultExpr NaClNonSfiBPFSandboxPolicy::InvalidSyscall() const {
   return CrashSIGSYS();
 }
 
-bool InitializeBPFSandbox() {
-  bool sandbox_is_initialized =
-      content::InitializeSandbox(scoped_ptr<sandbox::bpf_dsl::Policy>(
-          new nacl::nonsfi::NaClNonSfiBPFSandboxPolicy()));
+bool InitializeBPFSandbox(base::ScopedFD proc_task_fd) {
+  bool sandbox_is_initialized = content::InitializeSandbox(
+      scoped_ptr<sandbox::bpf_dsl::Policy>(
+          new nacl::nonsfi::NaClNonSfiBPFSandboxPolicy()),
+      proc_task_fd.Pass());
   if (!sandbox_is_initialized)
     return false;
   RunSandboxSanityChecks();
   return true;
 }
 
 }  // namespace nonsfi
 }  // namespace nacl