tree 29594918960f4b8b036e69bb18cfad76fd933f41
parent 648b220346aaee74ffbab35be6129bdfa5aca3a5
author Andrew Bresticker <abrestic@chromium.org> 1447286686 -0800
committer Andrew Bresticker <abrestic@chromium.org> 1447439649 -0800

minijail: Support setting syscall table with PR_ALT_SYSCALL

Add support for setting the syscall table for a jailed process using
prctl(PR_ALT_SYSCALL).  This adds the option '-a <table>' which
changes the jailed process's syscall table to the alt_syscall
table named <table>.  alt_syscall tables must be registerd in the
kernel (see crosreview.com/312137 for an example of how this is done).

Bug: 25649436
TEST=Create a test blacklist that blocks write(2) and observe that
'minijail0 -a test -- /bin/echo hello' prints nothing to stdout.

Change-Id: Idddafa1d0b81483a594e05d9d3390d4f9ad849c6
Signed-off-by: Andrew Bresticker <abrestic@chromium.org>