Write filter grate

[rennergade]

permits writes only to files matching a path extension (e.g. .log); uses copy_data_between_cages to inspect the filename at syscall time