Inicio Explorar Axuda
Iniciar sesión
rain1
/
linux-seccomp-pledge
Seguir 2
Destacar 1
Fork 1
Ficheiros Incidencias 0 Pull Requests 0 Wiki

Sen descrición

Rama: master
Ramas Etiquetas
linux-seccom...
ZIP TAR.GZ
rain1 d752021d6e README %!s(int64=8) %!d(string=hai) anos
.gitignore 77fa516549 Init commit %!s(int64=8) %!d(string=hai) anos
LICENSE 77fa516549 Init commit %!s(int64=8) %!d(string=hai) anos
README.md d752021d6e README %!s(int64=8) %!d(string=hai) anos
pledge.c ba2f763137 initial commit %!s(int64=8) %!d(string=hai) anos
pledge.h ba2f763137 initial commit %!s(int64=8) %!d(string=hai) anos
syscall_64.tbl ba2f763137 initial commit %!s(int64=8) %!d(string=hai) anos

README.md

linux-seccomp-pledge

The aim of this is to implement pledge on linux using seccomp rules.

seccomp supports filtering syscalls in a way that isn't vulnerable to race conditions (as ptrace is).

status

The design and structure of the code is complete (parses the pledge string correctly, builds up a a bitmask using flags, adds rules for each flag), all that's left is filling in each of the promise sections with all the syscalls that are needed, and testing them.