GitLab

This is a reland of 7d5fe940

Original change's description:
> Reland "Sandbox: Add support for CIG pre-launch."
> 
> This is a reland of 9e89ae37
> 
> Original change's description:
> > Sandbox: Add support for CIG pre-launch.
> > 
> > This CL allows MITIGATION_FORCE_MS_SIGNED_BINS to be
> > enabled pre-launch for targets even with dependent DLLs
> > It achieves this by adding a sandbox intercept for
> > NtCreateSection and permitting sections backing modules
> > that match a whitelist to be created in the broker
> > and mapped into the target for the load to succeed.
> > 
> > BUG=750886
> > 
> > Change-Id: Iac22e206f77f99d9c2253e906780f1bcf5e8e3e6
> > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1660097
> > Commit-Queue: Will Harris <wfh@chromium.org>
> > Reviewed-by: James Forshaw <forshaw@chromium.org>
> > Cr-Commit-Position: refs/heads/master@{#676665}
> 
> Bug: 750886
> Change-Id: I0de3189df0e5435fb33717fcaa3f82768d4504f6
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1699271
> Reviewed-by: James Forshaw <forshaw@chromium.org>
> Commit-Queue: Will Harris <wfh@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#677510}

Bug: 750886
Change-Id: Ib77c5590e58c395d8cedef12be46896919c457ab
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1709798Reviewed-by: James Forshaw <forshaw@chromium.org>
Reviewed-by: Reid Kleckner <rnk@chromium.org>
Commit-Queue: Will Harris <wfh@chromium.org>
Cr-Commit-Position: refs/heads/master@{#679813}