ozone: Whitelist some libs for the embedded build

Also switch harfbuzz to internal by default to minimize deps.

BUG=178543
TEST=run the tool
TBR=bashi1

Review URL: https://codereview.chromium.org/509323004

Cr-Commit-Position: refs/heads/master@{#292521}

third_party/harfbuzz-ng/harfbuzz.gyp

@@ -20,7 +20,7 @@
     'pkg-config': '<(pkg-config)',
 
     'conditions': [
-      ['OS=="linux" and (buildtype!="Official" or chromeos==1)', {
+      ['OS=="linux" and (buildtype!="Official" or chromeos==1) and embedded==0', {
         # Since version 1.31.0, pangoft2 which we depend on pulls in harfbuzz
         # anyways. However, we want to have control of the version of harfbuzz
         # we use, so don't use system harfbuzz for official builds, unless we

tools/check_ecs_deps/check_ecs_deps.py

@@ -39,7 +39,6 @@ kUndesiredLibraryList = [
   'libpcre',
   'libpixman',
   'libpng',
-  'libresolv',
   'libselinux',
   'libudev',
   'libxcb',
@@ -53,6 +52,7 @@ kAllowedLibraryList = [
   'libgcc_s',
   'libm',
   'libpthread',
+  'libresolv',
   'librt',
   'libstdc++',
   'linux-vdso',
@@ -68,6 +68,9 @@ kAllowedLibraryList = [
   'libplds4',
   'libsmime3',
 
+  # OpenSSL
+  'libcrypto',
+
   # Miscellaneous
   'libcap',
   'libexpat',