Linux sandbox: Restrict sched_* and ioprio_* calls in the cros arm GPU policy.