Simple run- go as root script (must be run as sudo path/to/goroot args)
Failing native test
Add test for non-existent read-write base directory

Also ensure syscall_linux.New() returns the correct type.
Integration testing

Rename Syscall_FS.

Improve error stacks. Inline undo functions in order to position the
gerror constructor calls closer to the source of the corresponding
errors.

Ensure SyscallFS is constructed with root privileges.
Rebind bind mount read-only

See https://lwn.net/Articles/281157/
Verify read-only bind mount

Make the remount conditional upon the first attempt to create a read-only bind
mount actually producing a read-write bind mount. Then after issuing the
remount, verify the result. All through, issue appropriate diagnostics.