Albert S. crtxcr
crtxcr closed issue crtxcr/exile.h#6 2021-11-21 22:59:03 +01:00
Automatic tests
crtxcr closed issue crtxcr/exile.h#8 2021-11-21 22:56:58 +01:00
Replace default blacklist with whitelist?
crtxcr created pull request crtxcr/exile.h#22 2021-11-21 15:29:21 +01:00
WIP low-level seccomp arg filter interface
crtxcr created branch WIP/argsfilter in crtxcr/exile.h 2021-11-21 15:28:59 +01:00
crtxcr pushed to WIP/argsfilter at crtxcr/exile.h 2021-11-21 15:28:59 +01:00
89749bd03b WIP low-level seccomp arg filter interface
crtxcr pushed to master at crtxcr/exile.h 2021-11-20 20:55:20 +01:00
d150c2ecd9 Don't add any seccomp rules by default
crtxcr opened issue crtxcr/exile.h#21 2021-11-20 20:53:16 +01:00
Landlock runtime detection
crtxcr commented on issue crtxcr/exile.h#14 2021-11-20 19:52:33 +01:00
seccomp: support Deny -> Permit -> Default Deny

Implemented

crtxcr closed issue crtxcr/exile.h#14 2021-11-20 19:52:33 +01:00
seccomp: support Deny -> Permit -> Default Deny
crtxcr closed issue crtxcr/exile.h#18 2021-11-20 19:52:05 +01:00
Allow adding syscalls by group names
crtxcr pushed to master at crtxcr/exile.h 2021-11-20 19:25:53 +01:00
435bcefa48 test: Skip landlock specific tests if unavailble during compile time
crtxcr pushed to master at crtxcr/exile.h 2021-11-20 17:03:54 +01:00
ed5b0fc983 test: Skip landlock specific tests if unavailble during compile time
2a4cee2ece test: Use xqssb_enable_policy() throughout where reasonable
Compare 2 commits »
crtxcr deleted branch WIP/groups from crtxcr/exile.h 2021-11-14 21:49:12 +01:00
crtxcr closed pull request crtxcr/exile.h#20 2021-11-14 21:49:06 +01:00
WIP: Assign syscalls into groups. Add whitelist mode (default).
crtxcr pushed to master at crtxcr/exile.h 2021-11-14 21:48:36 +01:00
d847d0f996 qssb_append_group_syscall_policy(): Make QSSB_SYSCGROUP_NONE an invalid group
1a2443db18 qssb_append_syscalls_policy(): Fix mem leak on failure
db17e58deb Assign syscalls into groups. Add whitelist mode (default).
Compare 3 commits »
crtxcr created pull request crtxcr/exile.h#20 2021-11-08 23:01:15 +01:00
WIP: Assign syscalls into groups. Add whitelist mode (default).
crtxcr pushed to WIP/groups at crtxcr/exile.h 2021-11-08 23:00:52 +01:00
265a19d351 Assign syscalls into groups. Add whitelist mode (default).
crtxcr deleted branch WIP/nofs from crtxcr/exile.h 2021-11-06 17:02:13 +01:00
crtxcr deleted branch WIP/fixbpf from crtxcr/exile.h 2021-11-06 17:02:10 +01:00
crtxcr pushed to master at crtxcr/qsrun 2021-10-30 16:22:49 +02:00
89c9cc573e Add more reasonable screenshots