sandbox: sandbox_linux_unittests enforces TSYNC on ChromeOS

sandbox/linux/bpf_dsl/bpf_dsl_more_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/linux/bpf_dsl/bpf_dsl.h"
 
 #include <errno.h>
 #include <fcntl.h>
 #include <pthread.h>
 #include <sched.h>
@@ skipping 2249 matching lines @@
   }
 
   BPF_ASSERT(event->IsSignaled());
 
   BlacklistNanosleepPolicy::AssertNanosleepFails();
 
   return NULL;
 }
 
 SANDBOX_TEST(SandboxBPF, Tsync) {
-  if (SandboxBPF::SupportsSeccompThreadFilterSynchronization() !=
-      SandboxBPF::STATUS_AVAILABLE) {
+  SandboxBPF::SandboxStatus sandbox_status =
+      SandboxBPF::SupportsSeccompThreadFilterSynchronization();

[jln (very slow on Chromium), 2014/11/26 22:22:33]

This is a very outdated API, you should re-sync :)

+#if defined(OS_CHROMEOS)

[jln (very slow on Chromium), 2014/11/26 22:22:33]

This won't work unfortunately.

OS_CHROMEOS is just a type of build, that we run on Linux machines currently on
the WF.

We could ask infra to make sure that they're all running Trusty with updated
kernels, but that will take a little bit.

+  BPF_ASSERT_EQ(SandboxBPF::STATUS_AVAILABLE, sandbox_status);
+#else
+  if (sandbox_status != SandboxBPF::STATUS_AVAILABLE) {
     return;
   }
+#endif
 
   base::WaitableEvent event(true, false);
 
   // Create a thread on which to invoke the blocked syscall.
   pthread_t thread;
   BPF_ASSERT_EQ(
       0, pthread_create(&thread, NULL, &TsyncApplyToTwoThreadsFunc, &event));
 
   // Test that nanoseelp success.
   const struct timespec ts = {0, 0};
@@ skipping 110 matching lines @@
   BPF_ASSERT_EQ(ENOSYS, errno);
 
   BPF_ASSERT_EQ(-1, syscall(__NR_setgid, 300));
   BPF_ASSERT_EQ(EPERM, errno);
 }
 
 }  // namespace
 
 }  // namespace bpf_dsl
 }  // namespace sandbox