* changes: Add support for seccomp filter that limits setresuid/setresgid. Create APP_ZYGOTE seccomp policy. genfunctosyscallnrs: maps bionic functions to syscall numbers.