Ron's changes emulate the following linux/cnk calls:
[4] {"write", sys_write, 3, {.i = -1}},
[5] {"cnkopen", sysopen, 2, {.i = -1}},
[24] {"getuid", cnkgeteuid, 0, {.i = -1}},
[45] {"cnkbrk", cnkbrk, 1, {.i = -1}},
[47] {"getgid", cnkgeteuid, 0, {.i = -1}},
[49] {"geteuid", cnkgeteuid, 0, {.i = -1}},
[50] {"getegid", cnkgeteuid, 0, {.i = -1}},
[90] {"mmap", cnkmmap, 5, {.i = -1}},
[122] {"cnkuname", cnkuname, 1, {.i = -1}},
[173] {"sigaction", sigaction, 2, {.i = -1}},
[174] {"rt_sigprocmask", rt_sigprocmask, 4, {.l = -1}},
[232] {"cnksettid", cnksettid, 1, {.i = -1}},
[234] {"cnkexit", cnkexit, 1, {.i = -1}},
[3] {"read", sys_read, 3, {.i = 0}},
[77] {"getrusage", getrusage, 1, {.i = 0}},
[102] {"socketcall", cnksocketcall, 1, {.i = 0}},
[120] {"clone", cnkclone, 1, {.i = 0}},
[125] {"mprotect", cnkmprotect, 1, {.i = 0}},
[146] {"writev", cnkwritev, 1, {.i = 0}},
[179] {"pread64", syspread, 5, {.i = 0}},
[197] {"fstat64", fstat64, 1, {.i = -1}},
[221] {"futex", futex, 1, {.i = 0}},