crtxcr/exile.h
1
0
Fork 0
Code Issues 14 Pull Requests 1 Releases Wiki Activity

Compare commits

base: crtxcr:75f607bc350354ed31fd0977311917e13241e703
Branches Tags
crtxcr:master
crtxcr:next
crtxcr:WIP/enosys
crtxcr:WIP/cpp
...
compare: crtxcr:57238b535c7c5961cd0731af38f9f28ca541a589
Branches Tags
crtxcr:master
crtxcr:next
crtxcr:WIP/enosys
crtxcr:WIP/cpp

2 Commits
75f607bc35 ... 57238b535c

Author SHA1 Message Date
Albert S
57238b535c Expand disallowed system calls 
Relevant: #8
 2021-08-10 16:57:44 +02:00
Albert S
b4e8116c20 seccomp_enable_whitelist(): Fix comment 2021-08-10 16:55:58 +02:00
1 changed files with 4 additions and 1 deletions
Show Stats Expand all files Collapse all files

5
qssb.h
View File

@ -152,6 +152,9 @@ static int default_blacklisted_syscals[] = {
QSSB_SYS(process_vm_readv), QSSB_SYS(process_vm_readv),
QSSB_SYS(process_vm_writev), QSSB_SYS(process_vm_writev),
QSSB_SYS(userfaultfd), QSSB_SYS(userfaultfd),
QSSB_SYS(init_module),
QSSB_SYS(finit_module),
QSSB_SYS(delete_module),
-1 -1
}; };
@ -577,7 +580,7 @@ static int seccomp_enable_blacklist(int *syscalls)
} }
/* /*
* Blacklists the specified systemcalls. * Whitelists the specified systemcalls.
* *
* syscalls: array of system calls numbers. -1 must be the last entry. * syscalls: array of system calls numbers. -1 must be the last entry.
*/ */