 Daniel P. Berrangé
|
035121d23a
seccomp: report more useful errors from seccomp
|
6 years ago |
|
Daniel P. Berrangé
|
9a1565a03b
seccomp: don't kill process for resource control syscalls
|
6 years ago |
 Thomas Huth
|
e81e7b52f9
seccomp: Work-around GCC 4.x bug in gnu99 mode
|
6 years ago |
 Markus Armbruster
|
6548459769
seccomp: Clean up error reporting in parse_sandbox()
|
6 years ago |
 Marc-André Lureau
|
5780760f5e
seccomp: check TSYNC host capability
|
7 years ago |
|
Marc-André Lureau
|
70dfabeaa7
seccomp: set the seccomp filter to all threads
|
7 years ago |
|
Marc-André Lureau
|
bda08a5764
seccomp: prefer SCMP_ACT_KILL_PROCESS if available
|
7 years ago |
|
Marc-André Lureau
|
6f2231e9b0
seccomp: use SIGSYS signal instead of killing the thread
|
7 years ago |
|
Marc-André Lureau
|
056de1e894
seccomp: allow sched_setscheduler() with SCHED_IDLE policy
|
7 years ago |
 Yi Min Zhao
|
9d0fdecbad
sandbox: disable -sandbox if CONFIG_SECCOMP undefined
|
7 years ago |
 Eduardo Otubo
|
24f8cdc572
seccomp: add resourcecontrol argument to command line
|
8 years ago |
|
Eduardo Otubo
|
995a226f88
seccomp: add spawn argument to command line
|
8 years ago |
|
Eduardo Otubo
|
73a1e64725
seccomp: add elevateprivileges argument to command line
|
8 years ago |
|
Eduardo Otubo
|
2b716fa6d6
seccomp: add obsolete argument to command line
|
8 years ago |
|
Eduardo Otubo
|
1bd6152ae2
seccomp: changing from whitelist to blacklist
|
8 years ago |
 Eduardo Otubo
|
cf9dc9e480
seccomp: adding getrusage to the whitelist
|
9 years ago |
 Miroslav Rezanina
|
8e08f8a4a7
seccomp: adding sysinfo system call to whitelist
|
9 years ago |
 James Hogan
|
81bed73b53
seccomp: Whitelist cacheflush since 2.2.0 not 2.2.3
|
9 years ago |
 Peter Maydell
|
d38ea87ac5
all: Clean up includes
|
9 years ago |
 Andrew Jones
|
47d2067af3
seccomp: add cacheflush to whitelist
|
9 years ago |
|
Eduardo Otubo
|
f8d82b8eb8
seccomp: add memfd_create to whitelist
|
10 years ago |
 Paolo Bonzini
|
4b45b05549
seccomp: add mlockall to whitelist
|
10 years ago |
 Paul Moore
|
ea259acae5
seccomp: add mbind() to the syscall whitelist
|
10 years ago |
 Philipp Gesang
|
f73adec709
seccomp: whitelist syscalls fallocate(), fadvise64(), inotify_init1() and inotify_add_watch()
|
11 years ago |
|
Paul Moore
|
b22876cc2f
seccomp: add semctl() to the syscall whitelist
|
11 years ago |
|
Paul Moore
|
e3f9bb011a
seccomp: add shmctl(), mlock(), and munlock() to the syscall whitelist
|
11 years ago |
 Felix Geyer
|
8439761852
seccomp: add timerfd_create and timerfd_settime to the whitelist
|
11 years ago |
|
Paul Moore
|
918b94e287
seccomp: add some basic shared memory syscalls to the whitelist
|
11 years ago |
|
Paul Moore
|
0c2acb163f
seccomp: add mkdir() and fchmod() to the whitelist
|
11 years ago |
 Corey Bryant
|
2a13f99112
seccomp: exit if seccomp_init() fails
|
11 years ago |
