From 21aba697b88deb77fe9356a57ee142fb7fb56a12 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Wed, 28 Oct 2015 07:32:47 -0400 Subject: vimperator, seccomp --- todo | 14 ++------------ 1 file changed, 2 insertions(+), 12 deletions(-) (limited to 'todo') diff --git a/todo b/todo index 4afd3205d..8d1211425 100644 --- a/todo +++ b/todo @@ -34,14 +34,12 @@ $ 5. Add IRC clients: KVIrc (KDE), BitchX (CLI), Smuxi, Konversation (KDE), HexChat, Irssi (CLI), WeeChat (CLI) RSS: Liferea, akregator (KDE), newsbeuter (CLI), rawdog, -6. add kexec_file_load to default seccomp filter - -7. Tests not working on Arch: +6. Tests not working on Arch: profile_syntax.exp (profile syntax) fs_chroot.exp (chroot as user) private-etc.exp -8. Disable /dev/tcp in bash. Compiled time: --enable-net-redirections, --disable-net-redirections +7. Disable /dev/tcp in bash. Compiled time: --enable-net-redirections, --disable-net-redirections ksh and zsh seem to have it. Tests: @@ -56,11 +54,3 @@ cat <&3 c) A list of attacks http://www.lanmaster53.com/2011/05/7-linux-shells-using-built-in-tools/ -9. protocol filter: AF_UNIX, AF_INET, AF_INET6, AF_NETLINK, AF_PACKET - - // Create a raw IP socket with UDP protocol -sd = socket(PF_INET, SOCK_RAW, IPPROTO_UDP); - -// open a raw ethernet socket -s = socket(AF_PACKET, SOCK_DGRAM, htons(ETHERTYPE_IP)); - -- cgit v1.2.3-54-g00ecf