SuidBinaries: add novato baselines

novato is a VM target requiring a _userdebug container image. We need to
slightly relax the restrictions on suid/sgid binaries, same as
CL:458108. Simply symlink baseline.novato.s?id to the respective
baseline.vm.arc_userdebug.s?id.

BUG=b:36820804
TEST=pre-cq for CL:*382352

Change-Id: Ibf76ceb291ae54e33e99db7f1e85375a8b31ee11
Reviewed-on: https://chromium-review.googlesource.com/517906
Commit-Ready: Nicolas Norvez <norvez@chromium.org>
Tested-by: Nicolas Norvez <norvez@chromium.org>
Reviewed-by: Bernie Thompson <bhthompson@chromium.org>
diff --git a/client/site_tests/security_SuidBinaries/baseline.novato.sgid b/client/site_tests/security_SuidBinaries/baseline.novato.sgid
new file mode 120000
index 0000000..5d9ba06
--- /dev/null
+++ b/client/site_tests/security_SuidBinaries/baseline.novato.sgid
@@ -0,0 +1 @@
+baseline.vm.arc_userdebug.sgid
\ No newline at end of file
diff --git a/client/site_tests/security_SuidBinaries/baseline.novato.suid b/client/site_tests/security_SuidBinaries/baseline.novato.suid
new file mode 120000
index 0000000..af56fb0
--- /dev/null
+++ b/client/site_tests/security_SuidBinaries/baseline.novato.suid
@@ -0,0 +1 @@
+baseline.vm.arc_userdebug.suid
\ No newline at end of file