Allow using the namespace sandbox in zygote host.

components/nacl/zygote/nacl_fork_delegate_linux.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_NACL_ZYGOTE_NACL_FORK_DELEGATE_LINUX_H_
 #define COMPONENTS_NACL_ZYGOTE_NACL_FORK_DELEGATE_LINUX_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 18 matching lines @@
 // The NaClForkDelegate is created during Chrome linux zygote
 // initialization, and provides "fork()" functionality with
 // NaCl specific process characteristics (specifically address
 // space layout) as an alternative to forking the zygote.
 // A new delegate is passed in as an argument to ZygoteMain().
 class NaClForkDelegate : public content::ZygoteForkDelegate {
  public:
   explicit NaClForkDelegate(bool nonsfi_mode);
   ~NaClForkDelegate() override;
 
-  void Init(int sandboxdesc, bool enable_layer1_sandbox) override;

[jln (very slow on Chromium), 2015/02/06 00:37:29]

I added that to make it hard to have bugs such as the environment being cleared
on LaunchProcess() and loosing track of the need to sandbox. Could you keep it?

[rickyz (no longer on Chrome), 2015/02/06 01:53:19]

Done.

+  void Init(int sandboxdesc) override;
   void InitialUMA(std::string* uma_name,
                   int* uma_sample,
                   int* uma_boundary_value) override;
   bool CanHelp(const std::string& process_type,
                std::string* uma_name,
                int* uma_sample,
                int* uma_boundary_value) override;
   pid_t Fork(const std::string& process_type,
              const std::vector<int>& fds,
              const std::string& channel_id) override;
@@ skipping 23 matching lines @@
   int fd_;
 
   FRIEND_TEST_ALL_PREFIXES(NaClForkDelegateLinuxTest, EnvPassthrough);
 
   DISALLOW_COPY_AND_ASSIGN(NaClForkDelegate);
 };
 
 }  // namespace nacl
 
 #endif  // COMPONENTS_NACL_ZYGOTE_NACL_FORK_DELEGATE_LINUX_H_