security/fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 25 Wiki Activity
016da20443
fortify/helper/bwrap
History
Ophestra 37780456a7
All checks were successful
Test / Create distribution (push) Successful in 1m44s
Details
Test / Run NixOS test (push) Successful in 3m35s
Details
helper: block more unusual/privileged syscalls 
These are toggled by F_EXT and exposed as SyscallPolicy.Compat in the Go interface.

Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-25 12:35:47 +09:00
..
arg.go helper/bwrap: integrate seccomp into helper interface 2025-01-22 01:52:57 +09:00
builder.go helper/bwrap: move sync to helper state 2025-01-19 18:38:13 +09:00
config_test.go helper/bwrap: move sync to helper state 2025-01-19 18:38:13 +09:00
config.go helper/bwrap: integrate seccomp into helper interface 2025-01-22 01:52:57 +09:00
seccomp-export.c helper: block more unusual/privileged syscalls 2025-01-25 12:35:47 +09:00
seccomp-export.h helper: block more unusual/privileged syscalls 2025-01-25 12:35:47 +09:00
seccomp-resolve.go helper: block more unusual/privileged syscalls 2025-01-25 12:35:47 +09:00
seccomp.go helper: block more unusual/privileged syscalls 2025-01-25 12:35:47 +09:00
sequential.go helper/bwrap: integrate seccomp into helper interface 2025-01-22 01:52:57 +09:00
static.go helper/bwrap: separate sequential/static args 2025-01-15 13:07:06 +09:00