platform_external_minijail/libsyscalls.h, branch brillo-m7-dev Unnamed repository; edit this file 'description' to name the repository. Integrate BPF seccomp_filters to Minijail. 2012-04-30T14:53:11+00:00 Jorge Lucangeli Obes jorgelo@chromium.org 2012-01-17T19:30:23+00:00 524c04005b26aa15b004ac55aceefdc654893e66 BUG=chromium-os:25429 BUG=chromium-os:27878 TEST=security_Minijail_seccomp CQ-DEPEND=I13a9b22ac8d55f02d5a77b5beedb955386b63723 Change-Id: I5fa8f40b9a539a61d69439cad778c926fc934cb1 Reviewed-on: https://gerrit.chromium.org/gerrit/19527 Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org> Reviewed-by: Kees Cook <keescook@chromium.org> Commit-Ready: Jorge Lucangeli Obes <jorgelo@chromium.org> 
BUG=chromium-os:25429
BUG=chromium-os:27878
TEST=security_Minijail_seccomp
CQ-DEPEND=I13a9b22ac8d55f02d5a77b5beedb955386b63723

Change-Id: I5fa8f40b9a539a61d69439cad778c926fc934cb1
Reviewed-on: https://gerrit.chromium.org/gerrit/19527
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Commit-Ready: Jorge Lucangeli Obes <jorgelo@chromium.org>
libminijail,minijail0: add seccomp filter support 2011-09-15T19:33:36+00:00 Will Drewry wad@chromium.org 2011-08-19T02:36:27+00:00 32ac9f5392525576dcd7bf2e18fb4c230649a3da This change adds support for installing seccomp filters via libminijail or by using minijail0 with an arch-specific filters file. Support for LD_PRELOAD marshalling is still missing and will come in a new change. BUG=chromium-os:19459 TEST=minijail0 -r -S dash-cat.policy -u chronos -- /bin/dash -c '/bin/cat /proc/self/seccomp_filter' dash-cat.policy can be found in the bug. built for arm-generic, tegra2_seaboard, and x86-alex. Tested on x86-alex as above and with -H. Change-Id: I3cac97d1df62f70cd546763aeca8f52dd0aea09d Reviewed-on: http://gerrit.chromium.org/gerrit/7773 Reviewed-by: Elly Jones <ellyjones@chromium.org> Tested-by: Will Drewry <wad@chromium.org> 
This change adds support for installing seccomp filters via libminijail
or by using minijail0 with an arch-specific filters file.

Support for LD_PRELOAD marshalling is still missing and will come in a new change.

BUG=chromium-os:19459
TEST=minijail0 -r -S dash-cat.policy -u chronos -- /bin/dash -c '/bin/cat /proc/self/seccomp_filter'
dash-cat.policy can be found  in the bug.
built for arm-generic, tegra2_seaboard, and x86-alex.  Tested on x86-alex as above and with -H.

Change-Id: I3cac97d1df62f70cd546763aeca8f52dd0aea09d
Reviewed-on: http://gerrit.chromium.org/gerrit/7773
Reviewed-by: Elly Jones <ellyjones@chromium.org>
Tested-by: Will Drewry <wad@chromium.org>