From 64ed644f73886597df38b61a3c1cee51ca657301 Mon Sep 17 00:00:00 2001
From: Christian Blichmann <cblichmann@google.com>
Date: Thu, 7 Mar 2024 06:47:38 -0800
Subject: [PATCH] Include-what-you-use fix

PiperOrigin-RevId: 613568060
Change-Id: Ic81d933b7d16a2dc2ec06d3c2fd127713e608602
---
 sandboxed_api/sandbox2/policybuilder.cc | 1 +
 sandboxed_api/sandbox2/policybuilder.h  | 3 +--
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/sandboxed_api/sandbox2/policybuilder.cc b/sandboxed_api/sandbox2/policybuilder.cc
index 9ffab08..3e9435e 100644
--- a/sandboxed_api/sandbox2/policybuilder.cc
+++ b/sandboxed_api/sandbox2/policybuilder.cc
@@ -58,6 +58,7 @@
 #include "sandboxed_api/sandbox2/allow_all_syscalls.h"
 #include "sandboxed_api/sandbox2/allow_unrestricted_networking.h"
 #include "sandboxed_api/sandbox2/namespace.h"
+#include "sandboxed_api/sandbox2/network_proxy/filtering.h"
 #include "sandboxed_api/sandbox2/policy.h"
 #include "sandboxed_api/sandbox2/syscall.h"
 #include "sandboxed_api/sandbox2/trace_all_syscalls.h"
diff --git a/sandboxed_api/sandbox2/policybuilder.h b/sandboxed_api/sandbox2/policybuilder.h
index e6684fd..fd9aa12 100644
--- a/sandboxed_api/sandbox2/policybuilder.h
+++ b/sandboxed_api/sandbox2/policybuilder.h
@@ -548,8 +548,7 @@ class PolicyBuilder final {
   PolicyBuilder& AllowStaticStartup();
 
   // In addition to syscalls allowed by AllowStaticStartup, also allow reading,
-  // seeking, mmapping and closing files. It does not allow opening them, as
-  // the mechanism for doing so depends on whether GetFs-checks are used or not.
+  // seeking, mmap()-ing and closing files.
   PolicyBuilder& AllowDynamicStartup();
 
   // Appends a policy, which will be run on the specified syscall.