summaryrefslogtreecommitdiffstats
path: root/src/fseccomp
Commit message (Collapse)AuthorAge
* mdwx: block memfd_createLibravatar Topi Miettinen2019-03-05
| | | | | Some profiles may need adjusting if app uses memfd_create(2) and memory-deny-write-execute was enabled.
* move copyright statement to 2019Libravatar smitsohu2019-02-07
|
* fix small memleakLibravatar Reiner Herrmann2019-02-05
|
* removed mincore syscall from default seccomp filterLibravatar netblue302019-01-23
|
* adding mincore syscall to the default seccomp filter and some independent ↵Libravatar netblue302019-01-14
| | | | profiles
* remove seccomp warningLibravatar netblue302018-09-09
|
* Add personality to allow-debuggers (see #2021)Libravatar ಚಿರಾಗ್ ನಟರಾಜ್2018-07-09
|
* reverted commit 5a3eefa6e70e824f545add9169202f788a9ce14d, issue #1948Libravatar netblue302018-05-20
|
* tentative fix for issue #1948Libravatar netblue302018-05-19
|
* remove 64bit seccomp filter from 32bit architecturesLibravatar netblue302018-05-06
|
* consolidate makefilesLibravatar netblue302018-03-31
|
* support Spectre mitigation patch for gcc compilerLibravatar netblue302018-03-23
|
* move copyright statement to 2018Libravatar startx20172018-01-14
|
* replacing seccomp printing with a seccomp disassemblerLibravatar netblue302017-12-28
|
* strip trailing whitespaceLibravatar Fred-Barclay2017-11-19
|
* seccomp mdwx: block pkey_mprotect like mprotectLibravatar Topi Miettinen2017-11-11
|
* Improve seccomp architecture supportLibravatar Topi Miettinen2017-09-10
|
* "module" is already included in "privileged"Libravatar smitsohu2017-09-04
|
* Improve seccomp support for non-x86 architecturesLibravatar Topi Miettinen2017-09-02
|
* Workaround for build problems, but correct problem this timeLibravatar Topi Miettinen2017-09-02
|
* Workaround for build problems on arm64, s390x and sparc64Libravatar Topi Miettinen2017-09-01
|
* Improve cross-platform buildLibravatar Topi Miettinen2017-08-30
|
* fix seccomp secondary filter printing on i386 platformLibravatar netblue302017-08-30
|
* tentative fix for Debian cross-platform buildLibravatar netblue302017-08-30
|
* cleanupLibravatar netblue302017-08-27
|
* fix seccomp.keep for #1490Libravatar netblue302017-08-23
|
* cleanupLibravatar netblue302017-08-23
|
* seccomp: fix errnoLibravatar netblue302017-08-22
|
* Feature: switch/config option to block secondary architecturesLibravatar Topi Miettinen2017-08-19
| | | | | | | | | Add a feature for a new (opt-in) command line switch and config file option to block secondary architectures entirely. Also block changing Linux execution domain with personality() system call for the primary architecture. Closes #1479
* Postpone installation of seccomp filters just before execveLibravatar Topi Miettinen2017-08-19
|
* seccomp testingLibravatar netblue302017-08-18
|
* memory-deny-write-execute testingLibravatar netblue302017-08-18
|
* compile cleanupLibravatar startx20172017-08-15
|
* Fix copy-pasteLibravatar Topi Miettinen2017-08-13
|
* Allow any syscall to be blacklisted (#1447)Libravatar Topi Miettinen2017-08-13
| | | | | | | Allow any syscall to be blacklisted with aid of LD_PRELOAD library, libpostexecseccomp.so. Closes: #1447
* Seccomp: split @default into more meaningful smaller groupsLibravatar Topi Miettinen2017-08-06
|
* Seccomp: system call grouping and call numbersLibravatar Topi Miettinen2017-08-06
|
* get_mempolicy syscall was temporarily removed from the default seccomp list. ↵Libravatar netblue302017-08-02
| | | | | | It seems to break playing youtube videos on Firefox Nightly - #1414
* Memory-deny-write-execute featureLibravatar Topi Miettinen2017-07-30
| | | | Feature to block attempts to create writable and executable memory.
* Improve seccomp printingLibravatar Topi Miettinen2017-07-28
|
* Improve cross build support by using configured compiler instead of make defaultLibravatar Helmut Grohne2017-07-26
| | | | https://bugs.debian.org/869707
* Block some obsolete or unusual syscallsLibravatar Topi Miettinen2017-07-25
|
* Remove trailing whitespace from src/Libravatar Fred Barclay2017-05-24
|
* compile fixes on 32bit platformsLibravatar netblue302017-05-12
|
* --quiet fixesLibravatar startx20172017-04-10
|
* add new syscalls in default seccomp filterLibravatar startx20172017-03-31
|
* copyright 2017Libravatar netblue302017-02-11
|
* copyright 2017Libravatar netblue302017-02-11
|
* cleanupLibravatar netblue302016-11-27
|
* fixesLibravatar netblue302016-11-27
|