Ron's changes emulate the following linux/cnk calls: [4] {"write", sys_write, 3, {.i = -1}}, [5] {"cnkopen", sysopen, 2, {.i = -1}}, [24] {"getuid", cnkgeteuid, 0, {.i = -1}}, [45] {"cnkbrk", cnkbrk, 1, {.i = -1}}, [47] {"getgid", cnkgeteuid, 0, {.i = -1}}, [49] {"geteuid", cnkgeteuid, 0, {.i = -1}}, [50] {"getegid", cnkgeteuid, 0, {.i = -1}}, [90] {"mmap", cnkmmap, 5, {.i = -1}}, [122] {"cnkuname", cnkuname, 1, {.i = -1}}, [173] {"sigaction", sigaction, 2, {.i = -1}}, [174] {"rt_sigprocmask", rt_sigprocmask, 4, {.l = -1}}, [232] {"cnksettid", cnksettid, 1, {.i = -1}}, [234] {"cnkexit", cnkexit, 1, {.i = -1}}, [3] {"read", sys_read, 3, {.i = 0}}, [77] {"getrusage", getrusage, 1, {.i = 0}}, [102] {"socketcall", cnksocketcall, 1, {.i = 0}}, [120] {"clone", cnkclone, 1, {.i = 0}}, [125] {"mprotect", cnkmprotect, 1, {.i = 0}}, [146] {"writev", cnkwritev, 1, {.i = 0}}, [179] {"pread64", syspread, 5, {.i = 0}}, [197] {"fstat64", fstat64, 1, {.i = -1}}, [221] {"futex", futex, 1, {.i = 0}},