Albert S. crtxcr
crtxcr opened issue crtxcr/exile.h#12 2021-08-12 12:30:15 +02:00
Allow x32 system calls
crtxcr created branch WIP/fixbpf in crtxcr/exile.h 2021-08-12 12:29:34 +02:00
crtxcr pushed to WIP/fixbpf at crtxcr/exile.h 2021-08-12 12:29:34 +02:00
51844ea3ab bpf: Deny x32 system calls for now
66c6d28dcd bpf: Check arch value
5cd45c09b7 bpf: Use SECCOMP_RET_KILL_PROCESS instead SECCOMP_RET_KILL
Compare 3 commits »
crtxcr pushed to master at crtxcr/exile.h 2021-08-12 11:38:45 +02:00
fa06287b13 Use new qssb_append_*_syscall functions, remove old fields
68694723fe Begin qssb_append_*_syscall family of functions
4a4d551e75 Introduce "no_fs" and "no_new_fd" options.
Compare 3 commits »
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-12 11:38:20 +02:00
fa06287b13 Use new qssb_append_*_syscall functions, remove old fields
68694723fe Begin qssb_append_*_syscall family of functions
692c9b54b7 Use new qssb_append_*_syscall functions, remove old fields
06b0977fca fixup! Begin qssb_append_*_syscall family of functions
93e44bf235 Begin qssb_append_*_syscall family of functions
Compare 5 commits »
crtxcr created pull request crtxcr/exile.h#11 2021-08-11 20:55:05 +02:00
WIP/nofs
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-11 20:54:45 +02:00
692c9b54b7 Use new qssb_append_*_syscall functions, remove old fields
06b0977fca fixup! Begin qssb_append_*_syscall family of functions
93e44bf235 Begin qssb_append_*_syscall family of functions
Compare 3 commits »
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-10 16:59:28 +02:00
4a4d551e75 Introduce "no_fs" and "no_new_fd" options.
57238b535c Expand disallowed system calls
b4e8116c20 seccomp_enable_whitelist(): Fix comment
8fb15f3727 Introduce "no_fs" and "no_new_fd" options.
Compare 4 commits »
crtxcr pushed to master at crtxcr/exile.h 2021-08-10 16:59:09 +02:00
57238b535c Expand disallowed system calls
b4e8116c20 seccomp_enable_whitelist(): Fix comment
Compare 2 commits »
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-10 16:55:13 +02:00
8fb15f3727 Introduce "no_fs" and "no_new_fd" options.
f24dbf2ade Introduce "no_fs" and "no_new_fd" options.
Compare 2 commits »
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-10 16:48:35 +02:00
f24dbf2ade Introduce "no_fs" and "no_new_fd" options.
f1a38d2114 WIP nofs, no_new_fd, test. REBASE
0b647364ae WIP nofs
Compare 3 commits »
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-10 12:07:19 +02:00
f1a38d2114 WIP nofs, no_new_fd, test. REBASE
crtxcr created branch WIP/nofs in crtxcr/exile.h 2021-08-09 20:29:24 +02:00
crtxcr pushed to WIP/nofs at crtxcr/exile.h 2021-08-09 20:29:24 +02:00
0b647364ae WIP nofs
crtxcr opened issue crtxcr/exile.h#10 2021-08-09 20:17:19 +02:00
Missing fork() handling and pitfalls
crtxcr opened issue crtxcr/exile.h#9 2021-08-09 20:01:53 +02:00
Document limitations
crtxcr created pull request crtxcr/looqs#29 2021-08-08 16:28:37 +02:00
WIP/sandboxing
crtxcr pushed to master at crtxcr/aports 2021-08-08 16:14:46 +02:00
11729ddaf8 Update hs9001 to v0.4
crtxcr pushed to WIP/sandboxing at crtxcr/looqs 2021-08-08 16:12:54 +02:00
872ed7f2ef fixup! cli: moved processing of file content into sandboxed subprocess
crtxcr synced commits to master at crtxcr/hs9001 from mirror 2021-08-08 13:54:56 +02:00
1a6c75cea9 Improve README.md