woj/nsjail
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

configs/*: use KILL_PROCESS instead of KILL(_THREAD) when posssible

Browse Source
This commit is contained in:
Robert Swiecki 2022-02-07 17:23:31 +01:00
parent 6a99755e43
commit 3c03973f1f
9 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
configs/apache.cfg
View File

@ -120,7 +120,7 @@ mount {
is_bind: true is_bind: true
} }
seccomp_string: " KILL {" seccomp_string: " KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"

2
configs/bash-with-fake-geteuid.cfg
View File

@ -177,7 +177,7 @@ mount {
seccomp_string: "ERRNO(1337) { geteuid } " seccomp_string: "ERRNO(1337) { geteuid } "
seccomp_string: "ERRNO(0) { ptrace } " seccomp_string: "ERRNO(0) { ptrace } "
seccomp_string: "KILL { syslog } " seccomp_string: "KILL_PROCESS { syslog } "
seccomp_string: "DEFAULT ALLOW " seccomp_string: "DEFAULT ALLOW "
exec_bin { exec_bin {

2
configs/demo-dont-use-chrome-with-net.cfg
View File

@ -167,7 +167,7 @@ mount {
is_bind: true is_bind: true
} }
seccomp_string: " KILL {" seccomp_string: " KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"

2
configs/firefox-with-cloned-net.cfg
View File

@ -168,7 +168,7 @@ mount {
is_bind: true is_bind: true
} }
seccomp_string: "KILL {" seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"

2
configs/firefox-with-net.cfg
View File

@ -160,7 +160,7 @@ mount {
is_bind: true is_bind: true
} }
seccomp_string: "KILL {" seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"

2
configs/home-documents-with-xorg-no-net.cfg
View File

@ -142,7 +142,7 @@ mount {
is_bind: true is_bind: true
} }
seccomp_string: "KILL {" seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"

2
configs/imagemagick-convert.cfg
View File

@ -83,7 +83,7 @@ seccomp_string: " arch_prctl, sched_getaffinity, set_tid_address,"
seccomp_string: " clock_gettime, set_robust_list, exit_group," seccomp_string: " clock_gettime, set_robust_list, exit_group,"
seccomp_string: " clone, getcwd, pread64, readlink, prlimit64, madvise" seccomp_string: " clone, getcwd, pread64, readlink, prlimit64, madvise"
seccomp_string: "}" seccomp_string: "}"
seccomp_string: "DEFAULT KILL" seccomp_string: "DEFAULT KILL_PROCESS"
exec_bin { exec_bin {
path: "" path: ""

2
configs/xchat-with-net.cfg
View File

@ -132,7 +132,7 @@ mount {
is_bind: true is_bind: true
} }
seccomp_string: "KILL {" seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"

2
configs/znc-with-net.cfg
View File

@ -122,7 +122,7 @@ mount {
mandatory: true mandatory: true
} }
seccomp_string: "KILL {" seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace," seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv," seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev" seccomp_string: " process_vm_writev"