summaryrefslogtreecommitdiffstats
path: root/sandbox-seccomp-filter.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* use SC_ALLOW_ARG_MASK to limit mmap protectionsDamien Miller2019-08-231-2/+2
* allow mprotect(2) with PROT_(READ|WRITE|NONE) onlyDamien Miller2019-08-231-2/+24
* allow s390 specific ioctl for ecc hardware supportHarald Freudenberger2019-06-051-0/+1
* add futex(2) syscall to seccomp sandboxDamien Miller2018-09-151-0/+3
* Permit getuid()/geteuid() syscalls.Damien Miller2018-05-251-0/+12
* Allow nanosleep in preauth privsep child.Darren Tucker2018-04-131-0/+3
* Fix typo in "socketcall".Darren Tucker2017-04-251-1/+1
* Deny socketcall in seccomp filter on ppc64le.Darren Tucker2017-04-241-0/+1
* Missing header on Linux/s390Damien Miller2017-03-221-0/+3
* Fix syntax error on Linux/X32Damien Miller2017-03-201-1/+1
* Make seccomp-bpf sandbox work on Linux/X32Damien Miller2017-03-141-1/+9
* Remove macro trickery; no binary changeDamien Miller2017-03-141-40/+40
* support ioctls for ICA crypto card on Linux/s390Damien Miller2017-03-141-0/+6
* Fix weakness in seccomp-bpf sandbox arg inspectionDamien Miller2017-03-141-4/+20
* Deny lstat syscalls in seccomp sandboxDamien Miller2016-05-201-0/+6
* allow getrandom syscall; from Felix von LeitnerDamien Miller2015-09-101-0/+3
* upstream commitdjm@openbsd.org2015-06-301-0/+3
* add missing pselect6Damien Miller2015-06-251-0/+3
* trivial optimisation for seccomp-bpfDamien Miller2015-06-171-1/+1
* aarch64 support for seccomp-bpf sandboxDamien Miller2015-06-171-20/+85
* - (djm) [sandbox-seccomp-filter.c] Allow mremap and exit for DietLibc;Damien Miller2014-09-101-0/+4
* - (djm) [sandbox-seccomp-filter.c] Soft-fail stat() syscalls. Add XXX toDamien Miller2014-03-171-0/+3
* - (djm) [sandbox-seccomp-filter.c] Not all Linux architectures defineDamien Miller2014-02-061-0/+2
* - (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)Damien Miller2014-01-301-0/+1
* - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]Damien Miller2014-01-171-1/+1
* - (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday.Darren Tucker2013-06-021-0/+1
* - (djm) [configure.ac sandbox-seccomp-filter.c] Support for LinuxDamien Miller2013-02-221-0/+8
* - (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter isDamien Miller2012-07-061-3/+9
* - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandboxDamien Miller2012-04-041-0/+222