Sandboxed API Team 3323ddc129 Permit sandboxee's bpf() to fail ... The default policy causes immediate termination of a sandboxee that calls `bpf`(2). This does not allow for try-call use of `bpf()` to test for optional features. To support such try-call use cases, sandboxes would like to say: ``` sandbox2::PolicyBuilder builder; builder.BlockSyscallWithErrno(__NR_bpf, EPERM); ``` but this doesn't work because the default policy unconditionally treats `bpf()` as a sandbox violation. Remove the bpf violation check from the policy if `bpf()` is explicitly blocked with an errno. PiperOrigin-RevId: 345239389 Change-Id: I7fcfd3a938c610c8679edf8e1fa0238b32cc9db4		2020-12-02 08:38:32 -08:00
..
abort.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
add_policy_on_syscalls.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
buffer.cc	Migrate usage of StatusOr::operator bool to StautsOr::ok.	2020-07-07 00:14:07 -07:00
BUILD.bazel	Introduce config header to centralize CPU architecture checks	2020-09-10 05:48:00 -07:00
CMakeLists.txt	Introduce config header to centralize CPU architecture checks	2020-09-10 05:48:00 -07:00
hostname.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
ipc.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
limits.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
malloc.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
minimal.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
namespace.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
personality.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
pidcomms.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
policy.cc	Permit sandboxee's bpf() to fail	2020-12-02 08:38:32 -08:00
print_fds.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
sanitizer.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
sleep.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
starve.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00
symbolize.cc	Cleanup calls to sapi::StatusOr<>::ValueOrDie()	2020-04-02 07:42:45 -07:00
tsync.cc	Update license header with recommended best practices	2020-01-17 05:05:29 -08:00