| Commit message (Expand) | Author | Age | Files | Lines |
* | test-seccomp: fix compilation on arm64 | Zbigniew Jędrzejewski-Szmek | 2019-04-03 | 1 | -1/+7 |
* | test: add test case for restrict_suid_sgid() | Lennart Poettering | 2019-04-02 | 1 | -0/+208 |
* | seccomp: allow shmat to be a separate syscall on architectures which use a mu... | Zbigniew Jędrzejewski-Szmek | 2019-03-15 | 1 | -3/+6 |
* | seccomp: shm{get,at,dt} now have their own numbers everywhere | Zbigniew Jędrzejewski-Szmek | 2019-03-15 | 1 | -0/+9 |
* | util: split out nulstr related stuff to nulstr-util.[ch] | Lennart Poettering | 2019-03-14 | 1 | -0/+1 |
* | util: split out memcmp()/memset() related calls into memory-util.[ch] | Lennart Poettering | 2019-03-13 | 1 | -1/+1 |
* | test: skip various tests if namespacing is not available | Lennart Poettering | 2018-10-24 | 1 | -0/+5 |
* | seccomp: reduce logging about failure to add syscall to seccomp | Zbigniew Jędrzejewski-Szmek | 2018-09-24 | 1 | -8/+8 |
* | test-seccomp: log function names | Zbigniew Jędrzejewski-Szmek | 2018-09-24 | 1 | -1/+28 |
* | test-seccomp: move two similar tests closer | Zbigniew Jędrzejewski-Szmek | 2018-09-24 | 1 | -31/+31 |
* | test-seccomp: add log messages when skipping tests | Yu Watanabe | 2018-09-21 | 1 | -22/+68 |
* | tests: use a helper function to parse environment and open logging | Zbigniew Jędrzejewski-Szmek | 2018-09-14 | 1 | -1/+2 |
* | seccomp: add new system call filter, suitable as default whitelist for system... | Lennart Poettering | 2018-06-14 | 1 | -1/+2 |
* | tree-wide: remove Lennart's copyright lines | Lennart Poettering | 2018-06-14 | 1 | -3/+0 |
* | tree-wide: drop 'This file is part of systemd' blurb | Lennart Poettering | 2018-06-14 | 1 | -2/+0 |
* | nsflsgs: drop namespace_flag_{from,to}_string() | Yu Watanabe | 2018-05-05 | 1 | -19/+26 |
* | tree-wide: drop license boilerplate | Zbigniew Jędrzejewski-Szmek | 2018-04-06 | 1 | -13/+0 |
* | process-util: rework wait_for_terminate_and_warn() to take a flags parameter | Lennart Poettering | 2018-01-04 | 1 | -10/+10 |
* | Add SPDX license identifiers to source files under the LGPL | Zbigniew Jędrzejewski-Szmek | 2017-11-19 | 1 | -0/+1 |
* | test: add tests for syscall:errno style in SystemCallFilter= | Yu Watanabe | 2017-11-11 | 1 | -9/+42 |
* | fix includes | Matija Skala | 2017-10-30 | 1 | -1/+1 |
* | tests: let's make sure the seccomp filter lists remain properly ordered | Lennart Poettering | 2017-09-14 | 1 | -0/+31 |
* | util-lib: wrap personality() to fix up broken glibc error handling (#6766) | Lennart Poettering | 2017-09-08 | 1 | -49/+18 |
* | tests: check the return value of personality when errno is not set (#6752) | Evgeny Vereshchagin | 2017-09-06 | 1 | -12/+26 |
* | seccomp: rework seccomp_lock_personality() to apply filter to all archs | Lennart Poettering | 2017-08-29 | 1 | -1/+0 |
* | seccomp: default to something resembling the current personality when locking it | Lennart Poettering | 2017-08-29 | 1 | -4/+34 |
* | seccomp: LockPersonality boolean (#6193) | Topi Miettinen | 2017-08-29 | 1 | -0/+36 |
* | test-seccomp: arm64 does not have access() and poll() | Zbigniew Jędrzejewski-Szmek | 2017-07-15 | 1 | -0/+8 |
* | seccomp: arm64/x32 do not have _sysctl | Zbigniew Jędrzejewski-Szmek | 2017-07-15 | 1 | -0/+4 |
* | seccomp: enable RestrictAddressFamilies on ppc64, autodetect SECCOMP_RESTRICT... | Zbigniew Jędrzejewski-Szmek | 2017-05-10 | 1 | -0/+9 |
* | seccomp: assume clone() arg order is known on all architectures | Zbigniew Jędrzejewski-Szmek | 2017-05-07 | 1 | -3/+0 |
* | seccomp: add mmap/shmat defines for arm and arm64 | Zbigniew Jędrzejewski-Szmek | 2017-05-07 | 1 | -2/+2 |
* | seccomp: add mmap/shmat defines for ppc64 | Zbigniew Jędrzejewski-Szmek | 2017-05-07 | 1 | -2/+2 |
* | seccomp: drop SECCOMP_MEMORY_DENY_WRITE_EXECUTE_BROKEN, add test for shmat | Zbigniew Jędrzejewski-Szmek | 2017-05-07 | 1 | -8/+58 |
* | test-seccomp: limit the code under #ifdef | Zbigniew Jędrzejewski-Szmek | 2017-05-03 | 1 | -9/+10 |
* | seccomp: on s390 the clone() parameters are reversed | Lennart Poettering | 2017-02-08 | 1 | -0/+3 |
* | seccomp: MemoryDenyWriteExecute= should affect both mmap() and mmap2() (#5254) | Lennart Poettering | 2017-02-08 | 1 | -1/+11 |
* | seccomp: RestrictAddressFamilies= is not supported on i386/s390/s390x, make i... | Lennart Poettering | 2017-02-06 | 1 | -0/+16 |
* | seccomp: rework seccomp code, to improve compat with some archs | Lennart Poettering | 2017-01-17 | 1 | -7/+265 |
* | core: add new RestrictNamespaces= unit file setting | Lennart Poettering | 2016-11-04 | 1 | -0/+94 |
* | seccomp: allow specifying arm64, mips, ppc (#4491) | Zbigniew Jędrzejewski-Szmek | 2016-11-01 | 1 | -0/+33 |
* | seccomp: add test-seccomp test tool | Lennart Poettering | 2016-10-24 | 1 | -0/+103 |