Linux Sandbox: add resource limits to NaCl

sandbox/linux/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//testing/test.gni")
 
 declare_args() {
   compile_suid_client = is_linux
 
@@ skipping 49 matching lines @@
       "seccomp-bpf/sandbox_bpf_test_runner.h",
     ]
     deps += [ ":seccomp_bpf" ]
   }
 }
 
 # The main sandboxing test target.
 test("sandbox_linux_unittests") {
   sources = [
     "services/proc_util_unittest.cc",
+    "services/resource_limits_unittests.cc",
     "services/scoped_process_unittest.cc",
     "services/syscall_wrappers_unittest.cc",
     "services/thread_helpers_unittests.cc",
     "services/yama_unittests.cc",
     "syscall_broker/broker_file_permission_unittest.cc",
     "syscall_broker/broker_process_unittest.cc",
     "tests/main.cc",
     "tests/scoped_temporary_file.cc",
     "tests/scoped_temporary_file.h",
     "tests/scoped_temporary_file_unittest.cc",
@@ skipping 147 matching lines @@
     ]
   }
 }
 
 component("sandbox_services") {
   sources = [
     "services/init_process_reaper.cc",
     "services/init_process_reaper.h",
     "services/proc_util.cc",
     "services/proc_util.h",
+    "services/resource_limits.cc",
+    "services/resource_limits.h",
     "services/scoped_process.cc",
     "services/scoped_process.h",
     "services/syscall_wrappers.cc",
     "services/syscall_wrappers.h",
     "services/thread_helpers.cc",
     "services/thread_helpers.h",
     "services/yama.cc",
     "services/yama.h",
     "syscall_broker/broker_channel.cc",
     "syscall_broker/broker_channel.h",
@@ skipping 102 matching lines @@
   #      'type': 'none',
   #      'variables': {
   #        'test_suite_name': 'sandbox_linux_jni_unittests',
   #      },
   #      'dependencies': [
   #        'sandbox_linux_jni_unittests',
   #      ],
   #      'includes': [ '../../build/apk_test.gypi' ],
   #      }
 }