Block a user
Replace default blacklist with whitelist?
WIP low-level seccomp arg filter interface
seccomp: support Deny -> Permit -> Default Deny
Allow adding syscalls by group names
ed5b0fc983
test: Skip landlock specific tests if unavailble during compile time
2a4cee2ece
test: Use xqssb_enable_policy() throughout where reasonable
WIP: Assign syscalls into groups. Add whitelist mode (default).
d847d0f996
qssb_append_group_syscall_policy(): Make QSSB_SYSCGROUP_NONE an invalid group
1a2443db18
qssb_append_syscalls_policy(): Fix mem leak on failure
db17e58deb
Assign syscalls into groups. Add whitelist mode (default).
WIP: Assign syscalls into groups. Add whitelist mode (default).