Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
platform
/
external
/
openssh
/
11d427162778c18fa42917893a75d178679a2389
/
sandbox-seccomp-filter.c
ccd3b24
add clock_gettime64(2) to sandbox allowed syscalls
by Damien Miller
· 4 years, 7 months ago
30f704e
Deny (non-fatal) ipc in preauth privsep child.
by Jeremy Drake
· 5 years ago
b110cef
seccomp: Allow clock_gettime64() in sandbox.
by Khem Raj
· 4 years, 8 months ago
5af6fd5
Allow clock_nanosleep_time64 in seccomp sandbox.
by Darren Tucker
· 4 years, 9 months ago
546274a
Remove duplicate __NR_clock_nanosleep
by Darren Tucker
· 4 years, 10 months ago
b1c82f4
seccomp: Allow clock_nanosleep() in sandbox.
by Darren Tucker
· 4 years, 10 months ago
8dc7d6b
Enable specific ioctl call for EP11 crypto card (s390)
by Eduardo Barretto
· 7 years ago
3ef92a6
Deny (non-fatal) shmget/shmat/shmdt in preauth privsep child.
by Lonnie Abelbeck
· 5 years ago
e83c989
use SC_ALLOW_ARG_MASK to limit mmap protections
by Damien Miller
· 5 years ago
f6906f9
allow mprotect(2) with PROT_(READ|WRITE|NONE) only
by Damien Miller
· 5 years ago
b3a77b2
allow s390 specific ioctl for ecc hardware support
by Harald Freudenberger
· 5 years ago
149519b
add futex(2) syscall to seccomp sandbox
by Damien Miller
· 6 years ago
4ef7592
Permit getuid()/geteuid() syscalls.
by Damien Miller
· 6 years ago
0e73428
Allow nanosleep in preauth privsep child.
by Darren Tucker
· 6 years ago
17a54a0
Fix typo in "socketcall".
by Darren Tucker
· 7 years ago
8b0eee1
Deny socketcall in seccomp filter on ppc64le.
by Darren Tucker
· 7 years ago
58b8cfa
Missing header on Linux/s390
by Damien Miller
· 7 years ago
6b853c6
Fix syntax error on Linux/X32
by Damien Miller
· 7 years ago
f86586b
Make seccomp-bpf sandbox work on Linux/X32
by Damien Miller
· 7 years ago
e3ea335
Remove macro trickery; no binary change
by Damien Miller
· 7 years ago
5f1596e
support ioctls for ICA crypto card on Linux/s390
by Damien Miller
· 7 years ago
9e96b41
Fix weakness in seccomp-bpf sandbox arg inspection
by Damien Miller
· 7 years ago
f64062b
Deny lstat syscalls in seccomp sandbox
by Damien Miller
· 8 years ago
26ad182
allow getrandom syscall; from Felix von Leitner
by Damien Miller
· 9 years ago
512cadd
upstream commit
by djm@openbsd.org
· 9 years ago
bc20205
add missing pselect6
by Damien Miller
· 9 years ago
97e2e15
trivial optimisation for seccomp-bpf
by Damien Miller
· 9 years ago
99f33d7
aarch64 support for seccomp-bpf sandbox
by Damien Miller
· 9 years ago
0fa0ed0
- (djm) [sandbox-seccomp-filter.c] Allow mremap and exit for DietLibc;
by Damien Miller
· 10 years ago
48abc47
- (djm) [sandbox-seccomp-filter.c] Soft-fail stat() syscalls. Add XXX to
by Damien Miller
· 10 years ago
6434cb2
- (djm) [sandbox-seccomp-filter.c] Not all Linux architectures define
by Damien Miller
· 11 years ago
7e5cec6
- (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)
by Damien Miller
· 11 years ago
868ea1e
- (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]
by Damien Miller
· 11 years ago
e9887d1
- (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday.
by Darren Tucker
· 11 years ago
91f40d8
- (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux
by Damien Miller
· 12 years ago
a0433a7
- (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter is
by Damien Miller
· 12 years ago
e0956e3
- (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox
by Damien Miller
· 12 years ago