SECCOMP-BPF: Added a unittest to check that we can restrict syscall(__NR_clone)

Added a unittest to check that we can restrict syscall(__NR_clone)


BUG=130662
TEST=sandbox_linux_unittests


Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=181121

[jln (very slow on Chromium), 2013-02-06 00:16:53]

Thanks Markus, LGTM

[jln (very slow on Chromium), 2013-02-06 01:12:57]

On 2013/02/06 00:16:53, Julien Tinnes wrote:
> Thanks Markus, LGTM

Actually, this doesn't pass on Android when there is kernel BPF support.

The flag on android is: 0x450F00

I didn't have time to symbolize it yet. Feel free to exclude Android from  your
test or to symbolize it.

[jln (very slow on Chromium), 2013-02-06 02:54:04]

On 2013/02/06 01:12:57, Julien Tinnes wrote:
> On 2013/02/06 00:16:53, Julien Tinnes wrote:
> > Thanks Markus, LGTM
> 
> Actually, this doesn't pass on Android when there is kernel BPF support.
> 
> The flag on android is: 0x450F00
> 
> I didn't have time to symbolize it yet. Feel free to exclude Android from 
your
> test or to symbolize it.

Also ARM Linux is likely to be different. Feel free to land after tying to one
specific architecture and OS.

[commit-bot: I haz the power, 2013-02-06 20:38:56]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/markus@chromium.org/12207029/3014

[commit-bot: I haz the power, 2013-02-07 00:53:39]

Change committed as 181121