StarMirror/sandboxed-api
1
0
Fork 0
mirror of https://github.com/google/sandboxed-api.git synced 2024-03-22 13:11:30 +08:00
Code Issues Projects Releases Wiki Activity
sandboxed-api/sandboxed_api/sandbox2/testcases
History
Sandboxed API Team 3323ddc129 Permit sandboxee's bpf() to fail 
The default policy causes immediate termination of a sandboxee that
calls `bpf`(2).

This does not allow for try-call use of `bpf()` to test for optional
features.

To support such try-call use cases, sandboxes would like to say:

```
  sandbox2::PolicyBuilder builder;
  builder.BlockSyscallWithErrno(__NR_bpf, EPERM);
```

but this doesn't work because the default policy unconditionally treats
`bpf()` as a sandbox violation.

Remove the bpf violation check from the policy if `bpf()` is explicitly
blocked with an errno.

PiperOrigin-RevId: 345239389
Change-Id: I7fcfd3a938c610c8679edf8e1fa0238b32cc9db4
2020-12-02 08:38:32 -08:00
..
abort.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
add_policy_on_syscalls.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
buffer.cc
Migrate usage of StatusOr::operator bool to StautsOr::ok.
2020-07-07 00:14:07 -07:00
BUILD.bazel
Introduce config header to centralize CPU architecture checks
2020-09-10 05:48:00 -07:00
CMakeLists.txt
Introduce config header to centralize CPU architecture checks
2020-09-10 05:48:00 -07:00
hostname.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
ipc.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
limits.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
malloc.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
minimal.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
namespace.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
personality.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
pidcomms.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
policy.cc
Permit sandboxee's bpf() to fail
2020-12-02 08:38:32 -08:00
print_fds.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
sanitizer.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
sleep.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
starve.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00
symbolize.cc
Cleanup calls to sapi::StatusOr<>::ValueOrDie()
2020-04-02 07:42:45 -07:00
tsync.cc
Update license header with recommended best practices
2020-01-17 05:05:29 -08:00