Update from https://crrev.com/316786

sandbox/linux/sandbox_linux.gypi

 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     'conditions': [
       ['OS=="linux"', {
         'compile_suid_client': 1,
         'compile_credentials': 1,
@@ skipping 109 matching lines @@
       'sources': [
         'bpf_dsl/bpf_dsl.cc',
         'bpf_dsl/bpf_dsl.h',
         'bpf_dsl/bpf_dsl_forward.h',
         'bpf_dsl/bpf_dsl_impl.h',
         'bpf_dsl/codegen.cc',
         'bpf_dsl/codegen.h',
         'bpf_dsl/cons.h',
         'bpf_dsl/dump_bpf.cc',
         'bpf_dsl/dump_bpf.h',
+        'bpf_dsl/linux_syscall_ranges.h',
         'bpf_dsl/policy.cc',
         'bpf_dsl/policy.h',
         'bpf_dsl/policy_compiler.cc',
         'bpf_dsl/policy_compiler.h',
+        'bpf_dsl/seccomp_macros.h',
+        'bpf_dsl/seccomp_macros.h',
         'bpf_dsl/syscall_set.cc',
         'bpf_dsl/syscall_set.h',
         'bpf_dsl/trap_registry.h',
         'seccomp-bpf/die.cc',
         'seccomp-bpf/die.h',
         'seccomp-bpf/errorcode.cc',
         'seccomp-bpf/errorcode.h',
-        'seccomp-bpf/linux_seccomp.h',
         'seccomp-bpf/sandbox_bpf.cc',
         'seccomp-bpf/sandbox_bpf.h',
         'seccomp-bpf/syscall.cc',
         'seccomp-bpf/syscall.h',
         'seccomp-bpf/trap.cc',
         'seccomp-bpf/trap.h',
         'seccomp-bpf/verifier.cc',
         'seccomp-bpf/verifier.h',
       ],
       'dependencies': [
@@ skipping 62 matching lines @@
       ],
       'ldflags/': [
         ['exclude', '-fsanitize'],
       ],
     },
     { 'target_name': 'sandbox_services',
       'type': '<(component)',
       'sources': [
         'services/init_process_reaper.cc',
         'services/init_process_reaper.h',
+        'services/proc_util.cc',
+        'services/proc_util.h',
+        'services/resource_limits.cc',
+        'services/resource_limits.h',
         'services/scoped_process.cc',
         'services/scoped_process.h',
         'services/syscall_wrappers.cc',
         'services/syscall_wrappers.h',
         'services/thread_helpers.cc',
         'services/thread_helpers.h',
         'services/yama.cc',
         'services/yama.h',
         'syscall_broker/broker_channel.cc',
         'syscall_broker/broker_channel.h',
@@ skipping 17 matching lines @@
       ],
       'conditions': [
         ['compile_credentials==1', {
           'sources': [
             'services/credentials.cc',
             'services/credentials.h',
             'services/namespace_sandbox.cc',
             'services/namespace_sandbox.h',
             'services/namespace_utils.cc',
             'services/namespace_utils.h',
-            'services/proc_util.cc',
-            'services/proc_util.h',
           ],
           'dependencies': [
             # for capabilities.cc.
             '../build/linux/system.gyp:libcap',
           ],
         }],
       ],
       'include_dirs': [
         '..',
       ],
     },
     { 'target_name': 'sandbox_services_headers',
       'type': 'none',
       'sources': [
-        'services/android_arm_ucontext.h',
-        'services/android_arm64_ucontext.h',
-        'services/android_futex.h',
-        'services/android_ucontext.h',
-        'services/android_i386_ucontext.h',
-        'services/android_mips_ucontext.h',
-        'services/arm_linux_syscalls.h',
-        'services/arm64_linux_syscalls.h',
-        'services/mips_linux_syscalls.h',
-        'services/linux_syscalls.h',
-        'services/x86_32_linux_syscalls.h',
-        'services/x86_64_linux_syscalls.h',
+        'system_headers/android_arm64_ucontext.h',
+        'system_headers/android_arm_ucontext.h',
+        'system_headers/android_futex.h',
+        'system_headers/android_i386_ucontext.h',
+        'system_headers/android_mips_ucontext.h',
+        'system_headers/android_ucontext.h',
+        'system_headers/arm64_linux_syscalls.h',
+        'system_headers/arm_linux_syscalls.h',
+        'system_headers/linux_seccomp.h',
+        'system_headers/linux_syscalls.h',
+        'system_headers/mips_linux_syscalls.h',
+        'system_headers/x86_32_linux_syscalls.h',
+        'system_headers/x86_64_linux_syscalls.h',
       ],
       'include_dirs': [
         '..',
       ],
     },
     {
       # We make this its own target so that it does not interfere
       # with our tests.
       'target_name': 'libc_urandom_override',
       'type': 'static_library',
@@ skipping 91 matching lines @@
             '../../build/isolate.gypi',
           ],
           'sources': [
             '../sandbox_linux_unittests.isolate',
           ],
         },
       ],
     }],
   ],
 }