diff --git a/configs/apache.cfg b/configs/apache.cfg index a1f2ff6..7f954c8 100644 --- a/configs/apache.cfg +++ b/configs/apache.cfg @@ -120,7 +120,7 @@ mount { is_bind: true } -seccomp_string: " KILL {" +seccomp_string: " KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev" diff --git a/configs/bash-with-fake-geteuid.cfg b/configs/bash-with-fake-geteuid.cfg index 99a36af..ef873e1 100644 --- a/configs/bash-with-fake-geteuid.cfg +++ b/configs/bash-with-fake-geteuid.cfg @@ -177,7 +177,7 @@ mount { seccomp_string: "ERRNO(1337) { geteuid } " seccomp_string: "ERRNO(0) { ptrace } " -seccomp_string: "KILL { syslog } " +seccomp_string: "KILL_PROCESS { syslog } " seccomp_string: "DEFAULT ALLOW " exec_bin { diff --git a/configs/demo-dont-use-chrome-with-net.cfg b/configs/demo-dont-use-chrome-with-net.cfg index c6c6a5f..bf96ea3 100644 --- a/configs/demo-dont-use-chrome-with-net.cfg +++ b/configs/demo-dont-use-chrome-with-net.cfg @@ -167,7 +167,7 @@ mount { is_bind: true } -seccomp_string: " KILL {" +seccomp_string: " KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev" diff --git a/configs/firefox-with-cloned-net.cfg b/configs/firefox-with-cloned-net.cfg index 180ed9a..b949018 100644 --- a/configs/firefox-with-cloned-net.cfg +++ b/configs/firefox-with-cloned-net.cfg @@ -168,7 +168,7 @@ mount { is_bind: true } -seccomp_string: "KILL {" +seccomp_string: "KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev" diff --git a/configs/firefox-with-net.cfg b/configs/firefox-with-net.cfg index b88f8ea..633a5c1 100644 --- a/configs/firefox-with-net.cfg +++ b/configs/firefox-with-net.cfg @@ -160,7 +160,7 @@ mount { is_bind: true } -seccomp_string: "KILL {" +seccomp_string: "KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev" diff --git a/configs/home-documents-with-xorg-no-net.cfg b/configs/home-documents-with-xorg-no-net.cfg index 83cfb42..a701b1e 100644 --- a/configs/home-documents-with-xorg-no-net.cfg +++ b/configs/home-documents-with-xorg-no-net.cfg @@ -142,7 +142,7 @@ mount { is_bind: true } -seccomp_string: "KILL {" +seccomp_string: "KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev" diff --git a/configs/imagemagick-convert.cfg b/configs/imagemagick-convert.cfg index 962e302..8a3fe57 100644 --- a/configs/imagemagick-convert.cfg +++ b/configs/imagemagick-convert.cfg @@ -83,7 +83,7 @@ seccomp_string: " arch_prctl, sched_getaffinity, set_tid_address," seccomp_string: " clock_gettime, set_robust_list, exit_group," seccomp_string: " clone, getcwd, pread64, readlink, prlimit64, madvise" seccomp_string: "}" -seccomp_string: "DEFAULT KILL" +seccomp_string: "DEFAULT KILL_PROCESS" exec_bin { path: "" diff --git a/configs/xchat-with-net.cfg b/configs/xchat-with-net.cfg index 04c361b..19725d1 100644 --- a/configs/xchat-with-net.cfg +++ b/configs/xchat-with-net.cfg @@ -132,7 +132,7 @@ mount { is_bind: true } -seccomp_string: "KILL {" +seccomp_string: "KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev" diff --git a/configs/znc-with-net.cfg b/configs/znc-with-net.cfg index bdcc53e..13c5107 100644 --- a/configs/znc-with-net.cfg +++ b/configs/znc-with-net.cfg @@ -122,7 +122,7 @@ mount { mandatory: true } -seccomp_string: "KILL {" +seccomp_string: "KILL_PROCESS {" seccomp_string: " ptrace," seccomp_string: " process_vm_readv," seccomp_string: " process_vm_writev"