ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2024-12-22 15:02:25 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
9,776 Commits 2 Branches 70 Tags 87 MiB
ffb931f8b1
Commit Graph

4 Commits

Author SHA1 Message Date
Christian Prochaska
9b6cc75f1c tool/seccomp: allow 'restart_syscall' on x86_64 
Fixes #3831
 2020-07-30 08:49:23 +02:00
Norman Feske
0310c733d5 base-linux: let seccomp permit 'read' 
This is needed for using the 'wait_for_continue' debug mechanism.

Fixes #3798
 2020-07-03 11:58:31 +02:00
Christian Helmuth
93ab972ddc tool/seccomp: allow sigreturn on x86 
Fixes #3799
 2020-07-03 11:15:33 +02:00
Stefan Thöni
78497c03ca base-linux: enabled seccomp 
base-linux uses seccomp to reduce the available system calls
to the minimum set needed to run base-linux. There are still
some syscalls that allow accessing global state which should
be further reduced.

The combination of seccomp and socket descriptor caps should
provide an intermediate level of security for base-linux
thereby enabling base-linux as a migration path from using
the Linux kernel to the use of microkernel-based Genode.

Fixes #3581
 2020-05-27 11:56:46 +02:00