Add support for checking flags in syscall arguments in Minijail.
Also, extract some code into functions as well, to make the code more readable.
BUG=chromium-os:36848
TEST=syscall_filter_unittest, security_Minijail_seccomp
Change-Id: Iedf8ecbf1814340fd8b3e4ec687b303c9c024d0a
Reviewed-on: https://gerrit.chromium.org/gerrit/39128
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Commit-Ready: Jorge Lucangeli Obes <jorgelo@chromium.org>
diff --git a/Makefile b/Makefile
index cd6b51c..c86a647 100644
--- a/Makefile
+++ b/Makefile
@@ -49,7 +49,7 @@
libsyscalls.gen.o : libsyscalls.gen.c libsyscalls.h
syscall_filter_unittest : syscall_filter_unittest.o syscall_filter.o \
- bpf.o util.o libsyscalls.gen.o test_harness.h
+ bpf.o util.o libsyscalls.gen.o
$(CC) $(CFLAGS) -o $@ $^
syscall_filter_unittest.o : syscall_filter_unittest.c test_harness.h