chrony

faraphel/chrony

Fork 0

Commit graph

Author	SHA1	Message	Date
Miroslav Lichvar	61da7d0913	test: modify order of scfilter levels in system tests Start with positive levels to get the offending system calls in the system or audit log.	2023-06-01 14:52:56 +02:00
Miroslav Lichvar	97973b1833	sys_linux: add second scfilter level Add level "2" to enable a filter which blocks only specific system calls like fork and exec* instead of blocking everything unknown. It should be reliable with respect to changes in libraries, but it provides only a very limited protection.	2021-05-06 13:37:21 +02:00
Miroslav Lichvar	c536b2561b	test: rework seccomp testing Instead of a single test with enabled seccomp, rerun all other non-destructive and destructive tests for each seccomp level.	2021-04-29 13:23:34 +02:00

Author

SHA1

Message

Date

Miroslav Lichvar

61da7d0913

test: modify order of scfilter levels in system tests

Start with positive levels to get the offending system calls in the
system or audit log.

2023-06-01 14:52:56 +02:00

Miroslav Lichvar

97973b1833

sys_linux: add second scfilter level

Add level "2" to enable a filter which blocks only specific system calls
like fork and exec* instead of blocking everything unknown. It should
be reliable with respect to changes in libraries, but it provides only a
very limited protection.

2021-05-06 13:37:21 +02:00

Miroslav Lichvar

c536b2561b

test: rework seccomp testing

Instead of a single test with enabled seccomp, rerun all other
non-destructive and destructive tests for each seccomp level.

2021-04-29 13:23:34 +02:00

3 commits