validator_ragel: Link into TCB, use under env var

src/trusted/service_runtime/build.scons

Index: src/trusted/service_runtime/build.scons
diff --git a/src/trusted/service_runtime/build.scons b/src/trusted/service_runtime/build.scons
index 26b3e2a6e0f5156190743d37d3b81c49d311c4c3..17e7e17485f4ac3d2591f33f5c677ed35294df0f 100644
--- a/src/trusted/service_runtime/build.scons
+++ b/src/trusted/service_runtime/build.scons
@@ -751,6 +751,19 @@ if env.Bit('target_x86_64') and not env.CrossToolsBuild():
       )
   env.AddNodeToTestSuite(node, ['small_tests'], 'run_hello_x32_test')
 
+# Test canned hello_world binary with validator_ragel.
+if env.Bit('target_x86'):
+  node = env.CommandSelLdrTestNacl(
+      'dfa_hwd.out',
+      env.File(arch_testdata_dir + '/hello_world.nexe'),
+      stdout_golden = env.File('testdata/hello_world.stdout'),
+      stderr_golden = env.File('testdata/dfa_validator_hello.stderr'),
+      filter_regex = '"^(Hello, World!)$|DANGER"',
+      osenv='NACL_DANGEROUS_USE_DFA_VALIDATOR=1',
+      )
+  env.AddNodeToTestSuite(node, ['medium_tests', 'validator_tests'],
+                         'run_dfa_validator_hello_world_test')
+
 # ----------------------------------------------------------
 # Integration Tests
 # ----------------------------------------------------------