WIP/fixbpf #13

crtxcr · 2021-08-12T12:30:59+02:00

crtxcr trácht

2021-08-12 12:30:59 +02:00

Úinéir

TODO:

EACCES is hardcoded
Shrink BPF filter.

TODO: - EACCES is hardcoded - Shrink BPF filter.

crtxcr cuireadh 3 tiomantas 2021-08-12 12:31:00 +02:00 leis

bpf: Use SECCOMP_RET_KILL_PROCESS instead SECCOMP_RET_KILL 5cd45c09b7

We generally want to kill the process not the thread.

bpf: Check arch value 66c6d28dcd

The filter was missing this check for arch, allowing bypasses
by using different calling conventions of other architectures.

A trivial example is execve() of x86 from and x86_64 process.

bpf: Deny x32 system calls for now 51844ea3ab

The arch field is the same for x86_64 and x32, thus checking it
is not enough.

Simply using x32 system calls would allow a bypass. Thus,
we must check whether the system call number is in __X32_SYSCALL_BIT.

This is of course a lazy solution, we could also add the
same system call number + _X32_SYSCALL_BIT to our black/whitelists.

For now however, this however will do.

crtxcr bhrú i bhfeidhm WIP/fixbpf ó 89c5496fab go 83487c1699

2021-09-05 12:32:25 +02:00

Déan comparáid

crtxcr bhrú i bhfeidhm WIP/fixbpf ó 91a9b778eb go 8a9b1730de

2021-09-05 17:14:14 +02:00

Déan comparáid

crtxcr Cuir 1 gealltanas 2021-09-05 17:24:46 +02:00 leis

Rename qssb_append_default_syscall_policy() to better distinguish it from qssb_append_syscall_default_policy() 411e00715d

crtxcr Cuir 1 gealltanas 2021-09-06 21:53:45 +02:00 leis

enable_no_fs(): Fix corresponding test by adding missing default policy 215032f32c

crtxcr dhún an t-iarratas tarraingthe seo

2021-09-06 21:58:06 +02:00

Iarratas tarraingthe dúnta

Ní féidir an t-iarratas tarraingthe seo a athoscailt toisc gur scriosadh an brainse.

Sínigh isteach chun dul isteach sa chomhrá seo.

1 Rannpháirtithe

Fógraí

Dáta dlite

Níl aon dáta dlite socraithe.

Spleithiúlachtaí

Níl aon spleáchais leagtha síos.

Tagairt: crtxcr/exile.h#13