chaseccomp: fix compilation with newest dash, misc changes

* fix matching on unstripped whitespace: caught after upgrading to
  upstream dash & chaseccomp wouldn't compile
* add defines to ensure that we computed the filter length correctly
* inline cut_label
* EPERM on sigaction, sigprocmask, gettid, and kill on tgkill (so a
  crash doesn't trigger sandbox violations)
* move SIGSYS handler to C and add one for the network

The last change removes the stack trace from SIGSYS, but gives us the
syscall number which is probably more useful. (Indeed, we don't even
have a stack trace in release builds.)

0 files changed, 0 insertions, 0 deletions