summaryrefslogtreecommitdiff
path: root/profiles/seccomp/default.json
Commit message (Expand)AuthorAgeFilesLines
* seccomp: block socket calls to AF_VSOCK in default profileSebastiaan van Stijn2022-12-011-1/+13
* seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMONSebastiaan van Stijn2022-08-181-0/+22
* profiles: seccomp: add syscalls related to PKU in default policyzhubojun2022-07-111-0/+3
* profiles: seccomp: allow clock_settime64 when CAP_SYS_TIME is addedBastien Pascard2022-07-061-1/+2
* Allow different syscalls from kernels 5.12 -> 5.16Djordje Lukic2022-05-131-0/+5
* Merge pull request #43553 from AkihiroSuda/riscv64Justin Cormack2022-05-131-0/+15
|\
| * seccomp: support riscv64Akihiro Suda2022-05-021-0/+15
* | seccomp: add support for Landlock syscalls in default policyTudor Brindus2022-01-311-0/+3
|/
* seccomp: add support for "swapcontext" syscall in default policySören Tempel2021-12-181-1/+2
* Merge pull request #42649 from kinvolk/rata/seccomp-default-errnoSebastiaan van Stijn2021-08-031-0/+1
|\
| * seccomp: Use explicit DefaultErrnoRetRodrigo Campos2021-07-301-0/+1
* | seccomp: add support for "clone3" syscall in default policyDaniel P. Berrangé2021-07-271-0/+13
|/
* profiles/seccomp.Syscall: use pointers and omitemptySebastiaan van Stijn2021-06-171-80/+24
* seccomp.Syscall: embed runtime-spec Syscall typeSebastiaan van Stijn2021-06-171-19/+0
* Enable `process_vm_readv` and `process_vm_writev` for kernel > 4.8clubby7892021-03-041-0/+2
* profiles: seccomp: update to Linux 5.11 syscall listAleksa Sarai2021-01-271-0/+9
* seccomp: Add pidfd_getfd syscallMark Vainomaa2020-11-121-0/+1
* seccomp: Add pidfd_open and pidfd_send_signalMark Vainomaa2020-11-111-0/+2
* seccomp: replace types with runtime-spec typesSebastiaan van Stijn2020-09-181-7/+0
* Add faccessat2 to default seccomp profile.Jintao Zhang2020-08-171-0/+1
* Add openat2 to default seccomp profile.Jintao Zhang2020-08-161-0/+1
* seccomp: allow 'rseq' syscall in default seccomp profileFlorian Schmaus2020-06-261-0/+1
* Merge pull request #40995 from KentaTada/remove-unused-syscallJustin Cormack2020-05-281-2/+1
|\
| * seccomp: remove the unused query_module(2)Kenta Tada2020-05-191-2/+1
* | Merge pull request #40731 from sqreen/fix/seccomp-profileAkihiro Suda2020-05-201-0/+1
|\ \ | |/ |/|
| * seccomp: allow syscall membarrierJulio Guerra2020-04-071-0/+1
* | seccomp: Whitelist `clock_adjtime`Stanislav Levin2020-05-081-0/+2
* | seccomp: add 64-bit time_t syscallsSebastiaan van Stijn2020-03-251-3/+21
|/
* profiles: Fix file permissions on json filesArnaud Rebillout2019-09-161-0/+0
* seccomp: whitelist io-uring related system callsyoucai2019-09-071-0/+3
* Add sigprocmask to default seccomp profileMichael Crosby2019-08-291-0/+1
* Fix seccomp profile for clone syscallSebastiaan van Stijn2019-06-041-2/+2
* seccomp: whitelist io_pgetevents()Avi Kivity2019-03-181-0/+1
* seccomp: review updateTonis Tiigi2019-02-051-1/+1
* seccomp: allow ptrace for 4.8+ kernelsTonis Tiigi2018-11-041-0/+12
* Move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOGJustin Cormack2018-09-271-1/+15
* Whitelist syscalls linked to CAP_SYS_NICE in default seccomp profileNicolas V Castet2018-06-201-0/+16
* Whitelist statx syscall for libseccomp-2.3.3 onwardNobodyOnSE2018-03-061-0/+1
* Remove double defined alarmSimon Vikstrom2017-08-191-1/+0
* seccomp: whitelist quotactl with CAP_SYS_ADMINPanagiotis Moustafellos2017-08-091-0/+1
* Whitelist adjtimex get operation. Adjustment operations are gated by CAP_SYS_...Miklos Szegedi2017-06-021-1/+1
* Revert "Block obsolete socket families in the default seccomp profile"Justin Cormack2017-05-091-217/+2
* seccomp: Allow personality with UNAME26 bit set.Ian Campbell2017-05-021-0/+34
* profiles: seccomp: allow clock_settime when CAP_SYS_TIME is addedAntonio Murdaca2017-03-201-1/+2
* Seccomp UpdateJustin Cormack2017-03-071-0/+2
* Allow sync_file_range2 on supported architectures.Gabriel Linder2017-02-141-0/+15
* Add two arm specific syscalls to seccomp profileJustin Cormack2017-01-291-0/+2
* Block obsolete socket families in the default seccomp profileJustin Cormack2017-01-171-2/+217
* New seccomp formatAntonio Murdaca2016-09-011-1538/+641
* Move mlock back into the default ungated seccomp profileJustin Cormack2016-06-151-0/+15
View Lorry Controller Status