Import Chromium seccomp-bpf compiler, rev 799ae3bd3edd1801fee3dcf721269fa0864067f7
Fix unsoundness in Chromium sandbox::CodeGen::MergeTails.
Use Chromium seccomp-bpf compiler to dynamically build sandbox program.
Allow tgkill only for threads of the calling process itself.
Fix socketcall whitelisting on i386.
More comments.
with optional logging