[minijail] Add the ability to set capabilities from the command line

minijail.cc

-// Copyright (c) 2009 The Chromium OS Authors. All rights reserved.
+// Copyright (c) 2011 The Chromium OS Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 // Some portions Copyright (c) 2009 The Chromium Authors.
 //
 // Implements MiniJail jailing logic.
 
 #include "minijail.h"
 
 #include <errno.h>
 
@@ skipping 60 matching lines @@
     if (!env->FilterSyscallsBySource()) {
       return false;
     }
   } else if (opts->enforce_syscalls_benchmark()) {
     if (!env->FilterSyscallsBenchmarkOnly()) {
       return false;
     }
   }
 
   if (opts->use_capabilities()) {
-    // TODO(wad) use helpers to read caps from flags
-    if (!env->SanitizeCapabilities(0)) {
+    if (!env->SanitizeCapabilities(opts->caps_bitmask())) {
       return false;
     }
-    if (!env->SanitizeBoundingSet(0)) {
+    if (!env->SanitizeBoundingSet(opts->caps_bitmask())) {
       return false;
     }
   }
   return true;
 }
 
 }  // namespace chromeos