crtxcr/exile.h
1
0
Fork 0
程式碼 問題 14 合併請求 1 版本發布 Wiki 動態

WIP pledge/low-level seccomp arg filter interface #22

已關閉
crtxcr 請求將 0 次程式碼提交從 WIP/argsfilter 合併至 master
拉取自: WIP/argsfilter
合併到: crtxcr:master
對話內容 2 程式碼提交 - 檔案變動 -
crtxcr 已留言 2021-11-21 15:29:20 +01:00
擁有者
複製連結
No description provided.
crtxcr 強制推送了 WIP/argsfilter 自 89749bd03b 至 371c6a94b6 2021-11-30 18:33:22 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 371c6a94b6 至 ac3e84ed16 2021-12-01 23:55:57 +01:00 比較
crtxcr 已留言 2021-12-02 10:17:27 +01:00
作者
擁有者
複製連結

Test for blacklist:

  • syscall without args
  • syscall with args
  • syscall without args
Test for blacklist: - syscall without args - syscall with args - syscall without args
crtxcr 將標題從 WIP low-level seccomp arg filter interface 改為 WIP pledge/low-level seccomp arg filter interface 2021-12-05 17:32:21 +01:00
crtxcr 強制推送了 WIP/argsfilter 自 7bfa7f5961 至 08a2445c26 2021-12-19 20:27:13 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 fa473601d3 至 eca3b3d622 2021-12-20 16:16:06 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 eca3b3d622 至 c7991ceefa 2021-12-20 17:30:51 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 9a95ad0c6a 至 34b58c5b32 2021-12-24 16:22:28 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 45f5f16bb8 至 d742397b52 2021-12-26 18:16:07 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 beeae95fe1 至 72ee3b3d74 2021-12-27 00:44:44 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 72ee3b3d74 至 a7a9c6962a 2021-12-27 12:00:41 +01:00 比較
crtxcr 強制推送了 WIP/argsfilter 自 3e4ae74203 至 ca0f82790c 2021-12-27 12:36:32 +01:00 比較
crtxcr 加入了 2 個提交 2021-12-27 14:18:15 +01:00 
Some distros put sys/capability.h into libcap-dev or
similiar, which is a bit unforunate, we don't need
libcap-dev or anything like that.

Since we anyway only used the capget()/capset(), we can
just define a simple wrapper and call the syscall directly
and therefore avoid above mentioned issue.
crtxcr 加入了 1 個提交 2021-12-27 14:26:47 +01:00
crtxcr 加入了 1 個提交 2021-12-27 17:03:42 +01:00 
We cannot assume that landlock is enabled if we can compile it.
Even if it's enabled in the kernel it may still not be loaded.

We fill fallback to chroot/bind-mounts if we can.

If we can't (because path policies have landlock-specific options),
we can't do that either.

Closes: #21
crtxcr 已留言 2021-12-27 17:14:56 +01:00
作者
擁有者
複製連結

Merged

Merged
crtxcr 關閉了這個合併請求 2021-12-27 17:14:56 +01:00

Pull request closed

無法重新開放此合併請求，因為該分支已刪除。
登入 才能加入這對話。
審核者
No Reviewers
標籤
清除已選取標籤
bug
Something is not working
duplicate
This issue or pull request already exists
enhancement
New feature
help wanted
Need some help
invalid
Something is wrong
question
More information is needed
wontfix
This won't be fixed
未選擇標籤
里程碑
沒有項目
未選擇里程碑
負責人
清除負責人
crtxcr
沒有負責人
1 參與者
通知
截止日期
未設定截止日期。
先決條件

未設定先決條件。

參考: crtxcr/exile.h#22
No description provided.
刪除分支「WIP/argsfilter」

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?