latest

Add `DefaultAction(TraceAllSyscalls)` variant to `PolicyBuilder`

This helps write the kind of 'log, but allow' policy described in
[`notify.h`](https://github.com/google/sandboxed-api/blob/b9c84a1f75d282ff38ebed068bebe9960af9eb71/sandboxed_api/sandbox2/notify.h#L57) for all system calls not mentioned explicitly. One use case is writing a "permissive mode" runtime to give more information during development.

PiperOrigin-RevId: 603766051
Change-Id: I3c72f433a1e21c330b5dd9f1ede2faa570b75b09

Full CMake support

This version of Sandboxed API implements full support for CMake builds, making it easier to embed it into other projects.

Sandboxed API OSS release

This release contains the initial code drop for Sandboxed API and Sandbox2, its security driver.
See the release blog post.