aboutsummaryrefslogtreecommitdiffstats
path: root/src/fseccomp
Commit message (Collapse)AuthorAge
* remove 64bit seccomp filter from 32bit architecturesLibravatar netblue302018-05-06
|
* consolidate makefilesLibravatar netblue302018-03-31
|
* support Spectre mitigation patch for gcc compilerLibravatar netblue302018-03-23
|
* move copyright statement to 2018Libravatar startx20172018-01-14
|
* replacing seccomp printing with a seccomp disassemblerLibravatar netblue302017-12-28
|
* strip trailing whitespaceLibravatar Fred-Barclay2017-11-19
|
* seccomp mdwx: block pkey_mprotect like mprotectLibravatar Topi Miettinen2017-11-11
|
* Improve seccomp architecture supportLibravatar Topi Miettinen2017-09-10
|
* "module" is already included in "privileged"Libravatar smitsohu2017-09-04
|
* Improve seccomp support for non-x86 architecturesLibravatar Topi Miettinen2017-09-02
|
* Workaround for build problems, but correct problem this timeLibravatar Topi Miettinen2017-09-02
|
* Workaround for build problems on arm64, s390x and sparc64Libravatar Topi Miettinen2017-09-01
|
* Improve cross-platform buildLibravatar Topi Miettinen2017-08-30
|
* fix seccomp secondary filter printing on i386 platformLibravatar netblue302017-08-30
|
* tentative fix for Debian cross-platform buildLibravatar netblue302017-08-30
|
* cleanupLibravatar netblue302017-08-27
|
* fix seccomp.keep for #1490Libravatar netblue302017-08-23
|
* cleanupLibravatar netblue302017-08-23
|
* seccomp: fix errnoLibravatar netblue302017-08-22
|
* Feature: switch/config option to block secondary architecturesLibravatar Topi Miettinen2017-08-19
| | | | | | | | | Add a feature for a new (opt-in) command line switch and config file option to block secondary architectures entirely. Also block changing Linux execution domain with personality() system call for the primary architecture. Closes #1479
* Postpone installation of seccomp filters just before execveLibravatar Topi Miettinen2017-08-19
|
* seccomp testingLibravatar netblue302017-08-18
|
* memory-deny-write-execute testingLibravatar netblue302017-08-18
|
* compile cleanupLibravatar startx20172017-08-15
|
* Fix copy-pasteLibravatar Topi Miettinen2017-08-13
|
* Allow any syscall to be blacklisted (#1447)Libravatar Topi Miettinen2017-08-13
| | | | | | | Allow any syscall to be blacklisted with aid of LD_PRELOAD library, libpostexecseccomp.so. Closes: #1447
* Seccomp: split @default into more meaningful smaller groupsLibravatar Topi Miettinen2017-08-06
|
* Seccomp: system call grouping and call numbersLibravatar Topi Miettinen2017-08-06
|
* get_mempolicy syscall was temporarily removed from the default seccomp list. ↵Libravatar netblue302017-08-02
| | | | | | It seems to break playing youtube videos on Firefox Nightly - #1414
* Memory-deny-write-execute featureLibravatar Topi Miettinen2017-07-30
| | | | Feature to block attempts to create writable and executable memory.
* Improve seccomp printingLibravatar Topi Miettinen2017-07-28
|
* Improve cross build support by using configured compiler instead of make defaultLibravatar Helmut Grohne2017-07-26
| | | | https://bugs.debian.org/869707
* Block some obsolete or unusual syscallsLibravatar Topi Miettinen2017-07-25
|
* Remove trailing whitespace from src/Libravatar Fred Barclay2017-05-24
|
* compile fixes on 32bit platformsLibravatar netblue302017-05-12
|
* --quiet fixesLibravatar startx20172017-04-10
|
* add new syscalls in default seccomp filterLibravatar startx20172017-03-31
|
* copyright 2017Libravatar netblue302017-02-11
|
* copyright 2017Libravatar netblue302017-02-11
|
* cleanupLibravatar netblue302016-11-27
|
* fixesLibravatar netblue302016-11-27
|
* profilesLibravatar netblue302016-11-20
|
* seccomp work 1Libravatar netblue302016-11-20
|
* fcopy part 1Libravatar netblue302016-11-16
|
* testingLibravatar netblue302016-11-12
|
* gcov supportLibravatar netblue302016-11-07
|
* seccomp reworkLibravatar netblue302016-11-06
|
* cleanupLibravatar netblue302016-11-06
|
* major cleanupLibravatar netblue302016-11-02
|
* major cleanupLibravatar netblue302016-10-30
|