index
:
openssh
IBS
PRIVSEP
V_2_5_2
V_2_9_9
V_2_9_P1
V_3_0_2
V_3_2_3
V_3_3
V_3_5
V_3_6
V_3_6_1
V_3_7
V_3_8
V_3_8_1
V_3_9
V_4_0
V_4_1
V_4_2
V_4_3
V_4_4
V_4_5
V_4_6
V_4_7
V_4_9
V_5_3
V_5_4
V_5_6
V_5_8
V_5_9
V_6_0
V_6_2
V_6_3
V_6_4
V_6_5
V_6_6
V_6_7
V_6_8
V_6_9
V_7_0
V_7_1
V_7_2
V_7_3
V_7_4
V_7_5
V_7_6
V_7_7
V_7_8
V_7_9
V_8_0
V_8_1
V_8_2
V_8_3
V_8_4
V_8_5
V_8_6
V_8_7
V_8_8
V_8_9
V_9_0
V_9_1
V_9_2
V_9_3
V_9_4
V_9_5
V_9_6
V_9_7
master
Mirror of https://anongit.mindrot.org/openssh.git
matthias
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sandbox-seccomp-filter.c
Age
Commit message (
Expand
)
Author
2020-01-08
Deny (non-fatal) ipc in preauth privsep child.
V_8_1
Jeremy Drake
2020-01-08
seccomp: Allow clock_gettime64() in sandbox.
Khem Raj
2020-01-08
Allow clock_nanosleep_time64 in seccomp sandbox.
Darren Tucker
2019-11-13
Remove duplicate __NR_clock_nanosleep
Darren Tucker
2019-11-13
seccomp: Allow clock_nanosleep() in sandbox.
Darren Tucker
2019-10-05
Enable specific ioctl call for EP11 crypto card (s390)
Eduardo Barretto
2019-10-02
Deny (non-fatal) shmget/shmat/shmdt in preauth privsep child.
Lonnie Abelbeck
2019-08-23
use SC_ALLOW_ARG_MASK to limit mmap protections
Damien Miller
2019-08-23
allow mprotect(2) with PROT_(READ|WRITE|NONE) only
Damien Miller
2019-06-05
allow s390 specific ioctl for ecc hardware support
Harald Freudenberger
2018-09-15
add futex(2) syscall to seccomp sandbox
Damien Miller
2018-05-25
Permit getuid()/geteuid() syscalls.
Damien Miller
2018-04-13
Allow nanosleep in preauth privsep child.
Darren Tucker
2017-04-25
Fix typo in "socketcall".
Darren Tucker
2017-04-24
Deny socketcall in seccomp filter on ppc64le.
Darren Tucker
2017-03-22
Missing header on Linux/s390
Damien Miller
2017-03-21
Fix syntax error on Linux/X32
Damien Miller
2017-03-14
Make seccomp-bpf sandbox work on Linux/X32
Damien Miller
2017-03-14
Remove macro trickery; no binary change
Damien Miller
2017-03-14
support ioctls for ICA crypto card on Linux/s390
Damien Miller
2017-03-14
Fix weakness in seccomp-bpf sandbox arg inspection
Damien Miller
2016-05-20
Deny lstat syscalls in seccomp sandbox
Damien Miller
2015-09-10
allow getrandom syscall; from Felix von Leitner
Damien Miller
2015-06-30
upstream commit
djm@openbsd.org
2015-06-25
add missing pselect6
Damien Miller
2015-06-17
trivial optimisation for seccomp-bpf
Damien Miller
2015-06-17
aarch64 support for seccomp-bpf sandbox
Damien Miller
2014-09-10
- (djm) [sandbox-seccomp-filter.c] Allow mremap and exit for DietLibc;
Damien Miller
2014-03-17
- (djm) [sandbox-seccomp-filter.c] Soft-fail stat() syscalls. Add XXX to
Damien Miller
2014-02-06
- (djm) [sandbox-seccomp-filter.c] Not all Linux architectures define
Damien Miller
2014-01-31
- (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)
Damien Miller
2014-01-17
- (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]
Damien Miller
2013-06-02
- (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday.
Darren Tucker
2013-02-22
- (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux
Damien Miller
2012-07-06
- (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter is
Damien Miller
2012-04-04
- (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox
Damien Miller