Albert S. crtxcr
0 追蹤者 · 0 追蹤中
儲存庫
23
 專案 套件 公開動態 已加星號
crtxcr 推送了 exile 到 crtxcr/exile.h 2021-11-30 18:10:26 +01:00
f377357501 rename to exile.h
crtxcr 推送了 exile 到 crtxcr/exile.h 2021-11-30 18:09:38 +01:00
f82be83402 rename to exile.h
crtxcr 在 crtxcr/exile.h 中建立了分支 exile 2021-11-30 18:05:10 +01:00
crtxcr 推送了 exile 到 crtxcr/exile.h 2021-11-30 18:05:10 +01:00
50a2769a8e rename to exile.h
756b0fb421 rename qssb.h to exile.h
比較 2 提交 »
crtxcr 在問題上留言 crtxcr/exile.h#6 2021-11-21 22:59:03 +01:00
Automatic tests

They exist now, will be expanded and new ones added

crtxcr 關閉了問題 crtxcr/exile.h#6 2021-11-21 22:59:03 +01:00
Automatic tests
crtxcr 關閉了問題 crtxcr/exile.h#8 2021-11-21 22:56:58 +01:00
Replace default blacklist with whitelist?
crtxcr 建立了合併請求 crtxcr/exile.h#22 2021-11-21 15:29:21 +01:00
WIP low-level seccomp arg filter interface
crtxcr 在 crtxcr/exile.h 中建立了分支 WIP/argsfilter 2021-11-21 15:28:59 +01:00
crtxcr 推送了 WIP/argsfilter 到 crtxcr/exile.h 2021-11-21 15:28:59 +01:00
89749bd03b WIP low-level seccomp arg filter interface
crtxcr 推送了 master 到 crtxcr/exile.h 2021-11-20 20:55:20 +01:00
d150c2ecd9 Don't add any seccomp rules by default
crtxcr 建立了問題 crtxcr/exile.h#21 2021-11-20 20:53:16 +01:00
Landlock runtime detection
crtxcr 在問題上留言 crtxcr/exile.h#14 2021-11-20 19:52:33 +01:00
seccomp: support Deny -> Permit -> Default Deny

Implemented

crtxcr 關閉了問題 crtxcr/exile.h#14 2021-11-20 19:52:33 +01:00
seccomp: support Deny -> Permit -> Default Deny
crtxcr 關閉了問題 crtxcr/exile.h#18 2021-11-20 19:52:05 +01:00
Allow adding syscalls by group names
crtxcr 推送了 master 到 crtxcr/exile.h 2021-11-20 19:25:53 +01:00
435bcefa48 test: Skip landlock specific tests if unavailble during compile time
crtxcr 推送了 master 到 crtxcr/exile.h 2021-11-20 17:03:54 +01:00
ed5b0fc983 test: Skip landlock specific tests if unavailble during compile time
2a4cee2ece test: Use xqssb_enable_policy() throughout where reasonable
比較 2 提交 »
crtxcr 刪除了 crtxcr/exile.h 的 WIP/groups 分支 2021-11-14 21:49:12 +01:00
crtxcr 關閉了合併請求crtxcr/exile.h#20 2021-11-14 21:49:06 +01:00
WIP: Assign syscalls into groups. Add whitelist mode (default).
crtxcr 推送了 master 到 crtxcr/exile.h 2021-11-14 21:48:36 +01:00
d847d0f996 qssb_append_group_syscall_policy(): Make QSSB_SYSCGROUP_NONE an invalid group
1a2443db18 qssb_append_syscalls_policy(): Fix mem leak on failure
db17e58deb Assign syscalls into groups. Add whitelist mode (default).
比較 3 提交 »