Allow adding syscalls by group names #18

Eagrán Nua

crtxcr · 2021-09-06T22:35:05+02:00

crtxcr trácht

2021-09-06 22:35:05 +02:00

Úinéir

If you add "open", there is a chance you also want to block "openat"...

So make this easy by allow adding system call by group names to the policy.

Also, maybe take some inspiration from pledge().

If you add "open", there is a chance you also want to block "openat"... So make this easy by allow adding system call by group names to the policy. Also, maybe take some inspiration from pledge().

crtxcr cuireadh an lipéad

enhancement

2021-09-06 22:35:05 +02:00 leis

crtxcr trácht

2021-09-18 22:55:42 +02:00

Údar

Úinéir

If there was a kernel update, but no qssb.h update or code is using an outdated verison, new syscalls could have been added that are not in any group yet.

Thus, we may habe to auto blacklist all those that we do not know.

Alternatively, adding syscalls by groups should only be allowed for whitelisting?

If there was a kernel update, but no qssb.h update or code is using an outdated verison, new syscalls could have been added that are not in any group yet. Thus, we may habe to auto blacklist all those that we do not know. Alternatively, adding syscalls by groups should only be allowed for whitelisting?

crtxcr dhún an cheist seo

2021-11-20 19:52:05 +01:00

Sínigh isteach chun dul isteach sa chomhrá seo.

1 Rannpháirtithe

Fógraí

Dáta dlite

Níl aon dáta dlite socraithe.

Spleithiúlachtaí

Níl aon spleáchais leagtha síos.

Tagairt: crtxcr/exile.h#18