mirrors
/
kore
mirror of https://git.kore.io/kore.git
1
0
Fork 1
Code Issues Projects Releases Wiki Activity
kore/src
History
Joris Vink 8bbdaedf94 Allow configuring seccomp on Linux via the python api. 
A new hook in the koreapp class is called right before seccomp
is enabled. This hook receives a Kore seccomp object which has
the following methods:

	seccomp.allow("syscall")
	seccomp.allow_arg("syscall", arg, value)
	seccomp.allow_flag("syscall", arg, flag)
	seccomp.allow_mask("syscall", arg, mask)

	seccomp.deny("syscall")
	seccomp.deny_arg("syscall", arg, value, errno=EACCES)
	seccomp.deny_flag("syscall", arg, flag, errno=EACCES)
	seccomp.deny_mask("syscall", arg, mask, errno=EACCES)

This allows you to finetune the seccomp filters for your application
from inside your koreapp.
 		2019-10-04 10:59:48 +02:00
..
accesslog.c Allow listening of tls/notls ports at the same time. 2019-09-27 12:27:04 +02:00
auth.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
bsd.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
buf.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
cli.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
config.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
connection.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
curl.c Allow listening of tls/notls ports at the same time. 2019-09-27 12:27:04 +02:00
domain.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
filemap.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
fileref.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
http.c Allow listening of tls/notls ports at the same time. 2019-09-27 12:27:04 +02:00
jsonrpc.c JSONRPC Updated to last kore_buf* commit 2016-07-15 13:17:30 +02:00
keymgr.c Add clock_gettime to keymgr process 2019-10-03 15:55:19 +02:00
kore.c kill norwegian debug 2019-09-27 20:08:16 +02:00
linux.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
mem.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
module.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00
msg.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
net.c include sys/socket.h in net.c 2019-10-03 12:19:36 +02:00
pgsql.c seccomp improvements. 2019-09-26 13:51:53 +02:00
pool.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
python.c Allow configuring seccomp on Linux via the python api. 2019-10-04 10:59:48 +02:00
runtime.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
seccomp.c Allow configuring seccomp on Linux via the python api. 2019-10-04 10:59:48 +02:00
tasks.c Allow listening of tls/notls ports at the same time. 2019-09-27 12:27:04 +02:00
timer.c rework timers so they fire more predictably. 2019-03-21 10:17:08 +01:00
utils.c Allow listening of tls/notls ports at the same time. 2019-09-27 12:27:04 +02:00
validator.c explicitly include sys/types.h 2019-03-06 09:29:46 +01:00
websocket.c http_timeout must be 0 when upgrading to websockets 2019-05-05 14:47:04 +02:00
worker.c Allow multiple binds on new server directive. 2019-09-27 20:00:35 +02:00