Albert S.

crtxcr δημιούργησε το κλαδο WIP/groups στο crtxcr/exile.h

2021-09-19 15:24:43 +02:00

crtxcr σχολίασε το ζήτημα crtxcr/exile.h#18

2021-09-18 22:55:42 +02:00

If there was a kernel update, but no qssb.h update or code is using an outdated verison, new syscalls could have been added that are not in any group yet.

Thus, we may habe to auto blacklist all…

crtxcr έκανε push στο master σε crtxcr/exile.h

2021-09-12 20:00:25 +02:00

11d64c6fcf enter_namespaces(): Check fopen/fprintf errors

crtxcr έκανε push στο master σε crtxcr/exile.h

2021-09-12 19:50:14 +02:00

ebe043c08d Fix missing \n in some error outputs

8bc0d1e73a Use overflow-safe operator builtins

Σύγκριση 2 υποβολών »

crtxcr άνοιξε το ζήτημα crtxcr/exile.h#18

2021-09-06 22:35:05 +02:00

Allow adding syscalls by group names

crtxcr άνοιξε το ζήτημα crtxcr/exile.h#17

2021-09-06 21:59:56 +02:00

Shrink BPF filters

crtxcr άνοιξε το ζήτημα crtxcr/exile.h#16

2021-09-06 21:58:35 +02:00

EACCES in hardcoded with QSSB_SYSCALL_DENY_RET_ERROR policy

crtxcr έκλεισε pull request crtxcr/exile.h#13

2021-09-06 21:58:06 +02:00

WIP/fixbpf

crtxcr έκανε push στο master σε crtxcr/exile.h

2021-09-06 21:57:53 +02:00

215032f32c enable_no_fs(): Fix corresponding test by adding missing default policy

411e00715d Rename qssb_append_default_syscall_policy() to better distinguish it from qssb_append_syscall_default_policy()

8a9b1730de test: Remove argc,argv from tests as there was no use for them

b2b501d97e test: Refactor: Put seccomp tests into child processes ; Simplfy .sh

26f391f736 test: implement test_seccomp_errno()

Σύγκριση 5 υποβολών »

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-09-06 21:53:44 +02:00

215032f32c enable_no_fs(): Fix corresponding test by adding missing default policy

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-09-05 17:24:45 +02:00

411e00715d Rename qssb_append_default_syscall_policy() to better distinguish it from qssb_append_syscall_default_policy()

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-09-05 17:14:13 +02:00

8a9b1730de test: Remove argc,argv from tests as there was no use for them

b2b501d97e test: Refactor: Put seccomp tests into child processes ; Simplfy .sh

26f391f736 test: implement test_seccomp_errno()

68fd1a0a87 test: test_seccomp_blacklisted_call_permitted(): Add missing default policy

b0d0beab22 README.md: Update

Σύγκριση 5 υποβολών »

crtxcr έκλεισε το ζήτημα crtxcr/exile.h#15

2021-09-05 17:09:05 +02:00

test.sh is too shaky with seccomp

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-09-05 16:53:42 +02:00

91a9b778eb test: Remove argc,argv from tests as there was no use for them

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-09-05 16:51:02 +02:00

91ae11bd0a test: Refactor: Put seccomp tests into child processes ; Simplfy .sh

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-09-05 12:32:24 +02:00

83487c1699 test: implement test_seccomp_errno()

430044bb95 test: test_seccomp_blacklisted_call_permitted(): Add missing default policy

443203aac4 README.md: Update

da19843875 test: Add test ensuring seccomp ends with default rule, minor fixes

Σύγκριση 4 υποβολών »

crtxcr συγχρονιστήκαν οι υποβολές του master στο crtxcr/hs9001 από το είδωλο 2021-08-19 22:24:56 +02:00

3a6a1b2aa9 bash-ctrlr: Improve reverse bash search performance

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-08-16 23:34:07 +02:00

89c5496fab README.md: Update

f79e3f42c4 test: Add test ensuring seccomp adds with default rule, minor fixes

06218966ac check_policy_sanity(): Add syscall policy checks

18940b312c test.sh: Log exit code, print yes/no instead of 1/0

Σύγκριση 4 υποβολών »

crtxcr άνοιξε το ζήτημα crtxcr/exile.h#15

2021-08-16 23:22:42 +02:00

test.sh is too shaky with seccomp

crtxcr έκανε push στο WIP/fixbpf σε crtxcr/exile.h

2021-08-15 19:00:01 +02:00

b6c3171619 fixup! WIP! Rewrite syscall policy logic

8f222d93a0 fixup! policy: Add disable_syscall_filter policy. Add defaults only on enable.

ad9afc6de4 fixup! policy: Add disable_syscall_filter policy. Add defaults only on enable.

0f9bf246a9 policy: Add disable_syscall_filter policy. Add defaults only on enable.

b2a0c1f39d qssb_entry_append(): Check for overflow

Σύγκριση 8 υποβολών »