summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
Commit message (Collapse)AuthorAgeFilesLines
* - (djm) [sandbox-seccomp-filter.c] Soft-fail stat() syscalls. Add XXX todjm2014-03-171-0/+3
| | | | remind myself to add sandbox violation logging via the log socket.
* - (djm) [sandbox-seccomp-filter.c] Not all Linux architectures definedjm2014-02-061-0/+2
| | | | __NR_shutdown; some go via the socketcall(2) multiplexer.
* - (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)djm2014-01-301-0/+1
| | | | syscall from sandboxes; it may be called by packet_close.
* - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]djm2014-01-171-1/+1
| | | | | | | [sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c] [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@
* - (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday.dtucker2013-06-011-0/+1
|
* - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linuxdjm2013-02-221-0/+8
| | | | | seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; ok dtucker
* - (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter isdjm2012-07-061-3/+9
| | | | | not available. Allows use of sshd compiled on host with a filter-capable kernel on hosts that lack the support. bz#2011 ok dtucker@
* - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandboxdjm2012-04-041-0/+222
mode for Linux's new seccomp filter; patch from Will Drewry; feedback and ok dtucker@