add restricted filesystem access to sel_ldr

src/trusted/service_runtime/nacl_syscall_common.h

Index: src/trusted/service_runtime/nacl_syscall_common.h
diff --git a/src/trusted/service_runtime/nacl_syscall_common.h b/src/trusted/service_runtime/nacl_syscall_common.h
index d3217c443582b6a8d1652c7c4591f75fb46872b5..90687529d024a05343007c48502cc8f11e9d4c68 100644
--- a/src/trusted/service_runtime/nacl_syscall_common.h
+++ b/src/trusted/service_runtime/nacl_syscall_common.h
@@ -45,6 +45,14 @@ extern int NaClAclBypassChecks;
 
 void NaClInsecurelyBypassAllAclChecks(void);
 
+extern char *NaClRootFolder;

[Mark Seaborn, 2015/06/25 23:55:09]

Nit: "Directory" or "Dir" would be preferred over "Folder" here, since the
former term is more commonly used in systems programming.

+extern size_t NaClRootFolderLen;
+
+void NaClMountRootFolder(char *root);
+
+/* bool */
+int NaClFileAccessEnabled(void);
+
 /* bool */
 int NaClSysCommonAddrRangeContainsExecutablePages(struct NaClApp *nap,
                                                   uintptr_t usraddr,