Bug 1078838 - Restrict clone(2) flags for sandboxed content processes. r=kang

--HG--
extra : amend_source : f80a3a672f5496f76d8649f0c8ab905044ea81ac