summaryrefslogtreecommitdiffstats
path: root/src/shared/seccomp-util.c (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* seccomp-util: move @default to the first positionZbigniew Jędrzejewski-Szmek2016-11-031-18/+18
* seccomp: add two new syscall groupsLennart Poettering2016-11-021-0/+34
* seccomp: include pipes and memfd in @ipcLennart Poettering2016-11-021-1/+4
* seccomp: drop execve() from @process listLennart Poettering2016-11-021-1/+0
* seccomp: add clock query and sleeping syscalls to "@default" groupLennart Poettering2016-11-021-1/+8
* seccomp: allow specifying arm64, mips, ppc (#4491)Zbigniew Jędrzejewski-Szmek2016-11-011-36/+93
* seccomp: add new helper call seccomp_load_filter_set()Lennart Poettering2016-10-241-0/+24
* seccomp: two fixes for the syscall set tablesLennart Poettering2016-10-241-2/+1
* seccomp: add new seccomp_init_conservative() helperLennart Poettering2016-10-241-2/+28
* core: rework syscall filter set handlingLennart Poettering2016-10-241-33/+95
* seccomp: add support for the s390 architecture (#4287)hbrueckner2016-10-051-0/+22
* seccomp: also detect if seccomp filtering is enabledFelipe Sateler2016-09-071-4/+15
* Merge pull request #3984 from poettering/refcntEvgeny Vereshchagin2016-08-261-0/+1
|\
| * seccomp: make sure getrlimit() is among the default permitted syscallsLennart Poettering2016-08-221-0/+1
* | core: do not fail at step SECCOMP if there is no kernel support (#4004)Felipe Sateler2016-08-221-0/+10
|/
* core: improve seccomp syscall grouping a bitLennart Poettering2016-06-131-19/+36
* core: add pre-defined syscall groups to SystemCallFilter= (#3053) (#3157)Topi Miettinen2016-06-011-0/+216
* tree-wide: remove Emacs lines from all filesDaniel Mack2016-02-101-2/+0
* shared: include what we useThomas Hindoe Paaboel Andersen2015-12-061-1/+3
* tree-wide: sort includesThomas Hindoe Paaboel Andersen2015-11-161-1/+1
* util-lib: split our string related calls from util.[ch] into its own file str...Lennart Poettering2015-10-241-0/+1
* seccomp: add helper call to add all secondary archs to a seccomp filterLennart Poettering2014-02-181-0/+26
* core: add SystemCallArchitectures= unit setting to allow disabling of non-nativeLennart Poettering2014-02-131-0/+63