WIP: Implement seccomp-bpf sandbox for nacl_helper_nonsfi.

sandbox/linux/services/syscall_wrappers.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/linux/services/syscall_wrappers.h"
 
 #include <pthread.h>
 #include <sched.h>
 #include <setjmp.h>
 #include <sys/resource.h>
 #include <sys/syscall.h>
 #include <sys/time.h>
 #include <sys/types.h>
 #include <unistd.h>
 
 #include "base/compiler_specific.h"
 #include "base/logging.h"
 #include "base/third_party/valgrind/valgrind.h"
 #include "build/build_config.h"
+#include "sandbox/linux/system_headers/linux_signal.h"
 #include "sandbox/linux/system_headers/linux_syscalls.h"
 
 namespace sandbox {
 
 pid_t sys_getpid(void) {
   return syscall(__NR_getpid);
 }
 
 pid_t sys_gettid(void) {
   return syscall(__NR_gettid);
@@ skipping 48 matching lines @@
 }
 
 int sys_capget(cap_hdr* hdrp, cap_data* datap) {
   return syscall(__NR_capget, hdrp, datap);
 }
 
 int sys_capset(cap_hdr* hdrp, const cap_data* datap) {
   return syscall(__NR_capset, hdrp, datap);
 }
 
+int sys_sigprocmask(
+    int how, const linux_sigset_t* set, linux_sigset_t* oldset) {
+  return syscall(__NR_rt_sigprocmask, how, set, oldset, sizeof(*set));
+}
+
+int sys_sigaction(int signum, const struct linux_sigaction* act,
+                  struct linux_sigaction* oldact) {
+  // TODO: Do we need to return an error if act has SA_RESTORE?
+  return syscall(__NR_rt_sigaction, signum, act, oldact, sizeof(act->sa_mask));
+}
+
 }  // namespace sandbox