This uses an RAII class to log a single message for whether the brokering was
allowed or blocked.
This removes the console logging. This was only originally added for old style
extensions. They could override most firefox code and could cause violations.
CallNtOpenProcessTokenEx loses its log calls with no SYSCALL_BROKERING
replacement. The token ACL now retains the user's own SID plus the sandbox
random SID so both normal and restricted checks pass anyway. Threading the
macros through this non-Target* helper isn't worth it.
It also removes the stack trace logging, this is now difficult to get working
in strong sandboxes and will be replaced by profiler markers.
Differential Revision: https://phabricator.services.mozilla.com/D309372
Bob Owen
462e77cc35