Change the sandbox API to require passing in a copy of /proc instead of
/proc/self. This allows "SupportsSeccompSandbox()" to work correctly, even
after it had to "fork()". Otherwise, the old "/proc/self" would point to
the parent process, and some kernels don't allow accessing it from the
child (even though it is still a valid file descriptor; it just stops
working).

BUG=n/a
TEST=make test
Review URL: https://chromiumcodereview.appspot.com/10389201

git-svn-id: http://seccompsandbox.googlecode.com/svn/trunk@184 55e79e8e-603c-11de-8c10-5fe6993ea61f
3 files changed