Linux sandbox: allow clock_getres() in renderers.

BUG=329053
R=jorgelo@chromium.org

Review URL: https://codereview.chromium.org/116853002

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@241115 0039d316-1c4b-4281-b951-d872f2087c98

content/common/sandbox_linux/bpf_renderer_policy_linux.cc

@@ -43,6 +43,9 @@ ErrorCode RendererProcessPolicy::EvaluateSyscall(SandboxBPF* sandbox,
     case __NR_prctl:
       return sandbox::RestrictPrctl(sandbox);
     // Allow the system calls below.
+    // The baseline policy allows __NR_clock_gettime. Allow
+    // clock_getres() for V8. crbug.com/329053.
+    case __NR_clock_getres:
     case __NR_fdatasync:
     case __NR_fsync:
     case __NR_getpriority: