GitLab

This is a reland of 9e89ae37

Original change's description:
> Sandbox: Add support for CIG pre-launch.
> 
> This CL allows MITIGATION_FORCE_MS_SIGNED_BINS to be
> enabled pre-launch for targets even with dependent DLLs
> It achieves this by adding a sandbox intercept for
> NtCreateSection and permitting sections backing modules
> that match a whitelist to be created in the broker
> and mapped into the target for the load to succeed.
> 
> BUG=750886
> 
> Change-Id: Iac22e206f77f99d9c2253e906780f1bcf5e8e3e6
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1660097
> Commit-Queue: Will Harris <wfh@chromium.org>
> Reviewed-by: James Forshaw <forshaw@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#676665}

Bug: 750886
Change-Id: I0de3189df0e5435fb33717fcaa3f82768d4504f6
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1699271Reviewed-by: James Forshaw <forshaw@chromium.org>
Commit-Queue: Will Harris <wfh@chromium.org>
Cr-Commit-Position: refs/heads/master@{#677510}