Add support for checking flags in syscall arguments in Minijail.
Also, extract some code into functions as well, to make the code more readable.
BUG=chromium-os:36848
TEST=syscall_filter_unittest, security_Minijail_seccomp
Change-Id: Iedf8ecbf1814340fd8b3e4ec687b303c9c024d0a
Reviewed-on: https://gerrit.chromium.org/gerrit/39128
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Commit-Ready: Jorge Lucangeli Obes <jorgelo@chromium.org>
5 files changed