3 Commits

Author	SHA1	Message	Date
Norman Feske	0310c733d5	base-linux: let seccomp permit 'read' ... This is needed for using the 'wait_for_continue' debug mechanism. Fixes #3798	2020-07-03 11:58:31 +02:00
Christian Helmuth	93ab972ddc	tool/seccomp: allow sigreturn on x86 ... Fixes #3799	2020-07-03 11:15:33 +02:00
Stefan Thöni	78497c03ca	base-linux: enabled seccomp ... base-linux uses seccomp to reduce the available system calls to the minimum set needed to run base-linux. There are still some syscalls that allow accessing global state which should be further reduced. The combination of seccomp and socket descriptor caps should provide an intermediate level of security for base-linux thereby enabling base-linux as a migration path from using the Linux kernel to the use of microkernel-based Genode. Fixes #3581	2020-05-27 11:56:46 +02:00