woj/nsjail
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

configs/*: use KILL_PROCESS instead of KILL(_THREAD) when posssible

Browse Source
This commit is contained in:
Robert Swiecki 2022-02-07 17:23:31 +01:00
parent 6a99755e43
commit 3c03973f1f
9 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
configs/apache.cfg
View File

@ -120,7 +120,7 @@ mount {
is_bind: true
}
seccomp_string: " KILL {"
seccomp_string: " KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"

2
configs/bash-with-fake-geteuid.cfg
View File

@ -177,7 +177,7 @@ mount {
seccomp_string: "ERRNO(1337) { geteuid } "
seccomp_string: "ERRNO(0) { ptrace } "
seccomp_string: "KILL { syslog } "
seccomp_string: "KILL_PROCESS { syslog } "
seccomp_string: "DEFAULT ALLOW "
exec_bin {

2
configs/demo-dont-use-chrome-with-net.cfg
View File

@ -167,7 +167,7 @@ mount {
is_bind: true
}
seccomp_string: " KILL {"
seccomp_string: " KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"

2
configs/firefox-with-cloned-net.cfg
View File

@ -168,7 +168,7 @@ mount {
is_bind: true
}
seccomp_string: "KILL {"
seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"

2
configs/firefox-with-net.cfg
View File

@ -160,7 +160,7 @@ mount {
is_bind: true
}
seccomp_string: "KILL {"
seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"

2
configs/home-documents-with-xorg-no-net.cfg
View File

@ -142,7 +142,7 @@ mount {
is_bind: true
}
seccomp_string: "KILL {"
seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"

2
configs/imagemagick-convert.cfg
View File

@ -83,7 +83,7 @@ seccomp_string: " arch_prctl, sched_getaffinity, set_tid_address,"
seccomp_string: " clock_gettime, set_robust_list, exit_group,"
seccomp_string: " clone, getcwd, pread64, readlink, prlimit64, madvise"
seccomp_string: "}"
seccomp_string: "DEFAULT KILL"
seccomp_string: "DEFAULT KILL_PROCESS"
exec_bin {
path: ""

2
configs/xchat-with-net.cfg
View File

@ -132,7 +132,7 @@ mount {
is_bind: true
}
seccomp_string: "KILL {"
seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"

2
configs/znc-with-net.cfg
View File

@ -122,7 +122,7 @@ mount {
mandatory: true
}
seccomp_string: "KILL {"
seccomp_string: "KILL_PROCESS {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"