Allow using the namespace sandbox in zygote host.

content/public/common/content_switches.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/content_switches.h"
 
 namespace switches {
 
 // The number of MSAA samples for canvas2D. Requires MSAA support by GPU to
 // have an effect. 0 disables MSAA.
@@ skipping 23 matching lines @@
 // Allows debugging of sandboxed processes (see zygote_main_linux.cc).
 const char kAllowSandboxDebugging[]         = "allow-sandbox-debugging";
 
 // The same as kAuditHandles except all handles are enumerated.
 const char kAuditAllHandles[]               = "enable-handle-auditing-all";
 
 // Enumerates and prints a child process' most dangerous handles when it
 // is terminated.
 const char kAuditHandles[]                  = "enable-handle-auditing";
 
+// Prefer the namespace sandbox over the setuid sandbox when possible.
+const char kEnableNamespaceSandbox[]        = "enable-namespace-sandbox";

[jln (very slow on Chromium), 2015/02/06 02:17:03]

Alphabetize (at the kEnableNamespaceSandbox level)

[rickyz (no longer on Chrome), 2015/02/06 03:01:02]

Done.

+
 // Choose which logging channels in blink platform to activate.  See
 // Logging.cpp in blink's Source/platform for a list of available channels.
 const char kBlinkPlatformLogChannels[]      = "blink-platform-log-channels";
 
 // Block cross-site documents (i.e., HTML/XML/JSON) from being loaded in
 // subresources when a document is not supposed to read them.  This will later
 // allow us to block them from the entire renderer process when site isolation
 // is enabled.
 const char kBlockCrossSiteDocuments[]     = "block-cross-site-documents";
 
@@ skipping 904 matching lines @@
 const char kEnableNpapi[]                   = "enable-npapi";
 
 #if defined(ENABLE_PLUGINS)
 // Enables the plugin power saver feature.
 const char kEnablePluginPowerSaver[] = "enable-plugin-power-saver";
 #endif
 
 // Don't dump stuff here, follow the same order as the header.
 
 }  // namespace switches