Some small changes:

* Accept named constants in the seccomp scripts.
* Chroot before execve, so that the binary's metadata in the
  /proc fs is correct.
* Fix some issues with the Makefile and libsyscall.gen.c