seccomp: support Deny -> Permit -> Default Deny #14

创建工单

crtxcr · 2021-08-12T12:48:48+02:00

crtxcr 评论于

管理员

We may want to

deny system calls, withouting kill the process
explicitly permit some system calls
deny all others.

Currentlly, this is not possible.

We may want to deny system calls, withouting kill the process explicitly permit some system calls deny all others. Currentlly, this is not possible.

crtxcr 于 2021-08-12 12:48:48 +02:00 添加了标签

crtxcr 评论于

作者

管理员

Implemented

crtxcr 于

关闭此工单

登录并参与到对话中。

1 名参与者

通知

到期时间

未设置到期时间。

依赖工单

没有设置依赖项。

参考：crtxcr/exile.h#14