Add support for checking flags in syscall arguments in Minijail.

Also, extract some code into functions as well, to make the code more readable.

BUG=chromium-os:36848
TEST=syscall_filter_unittest, security_Minijail_seccomp

Change-Id: Iedf8ecbf1814340fd8b3e4ec687b303c9c024d0a
Reviewed-on: https://gerrit.chromium.org/gerrit/39128
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Commit-Ready: Jorge Lucangeli Obes <jorgelo@chromium.org>
5 files changed