]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/shared/seccomp-util.c
seccomp: beef up @process group a bit
authorLennart Poettering <lennart@poettering.net>
Wed, 13 Sep 2017 17:40:23 +0000 (19:40 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 14 Sep 2017 13:45:21 +0000 (15:45 +0200)
commitb887d2ebfe19b09d498f71589d245ad2060f1afd
treebd058ad3f8e208b031a77c5bedacb0fa73c9cecb
parent7e0c3b8fda78157550d89cb55668604f43a4a2f2
seccomp: beef up @process group a bit

Include the waid syscalls. If we permit forking then we should also
permit waiting for a process.

Similar to that: also permit determining the usage counters for
processes.

Include calls to determine process/thread identity. They have little
impact security-wise, but are very likely used when process management
of any form is done.

Also, add rt_sigqueueinfo + rt_tgsigqueueinfo as they are similar to
kill() and friends, but permit passing along a userdata ptr.
src/shared/seccomp-util.c