Startseite Erkunden Hilfe
Registrieren Anmelden
pajamapants3000
/
linux-seccomp-pledge
geforkt von rain1/linux-seccomp-pledge
Beobachten 1
Favorit hinzufügen 0
Fork 0
Dateien Issues 0 Pull-Requests 0 Wiki

Fork of port of OpenBSD 'pledge()' function to Linux

Branch: master
Branches Tags
linux-seccom...
ZIP TAR.GZ
Tommy Lincoln 859f71af3c updated ptable[] vor 8 Jahren
.gitignore 859f71af3c updated ptable[] vor 8 Jahren
LICENSE 77fa516549 Init commit vor 8 Jahren
README.md d752021d6e README vor 8 Jahren
pledge.c 859f71af3c updated ptable[] vor 8 Jahren
pledge.h ba2f763137 initial commit vor 8 Jahren
syscall_64.tbl ba2f763137 initial commit vor 8 Jahren

README.md

linux-seccomp-pledge

The aim of this is to implement pledge on linux using seccomp rules.

seccomp supports filtering syscalls in a way that isn't vulnerable to race conditions (as ptrace is).

status

The design and structure of the code is complete (parses the pledge string correctly, builds up a a bitmask using flags, adds rules for each flag), all that's left is filling in each of the promise sections with all the syscalls that are needed, and testing them.