diff options
| author | Kees Cook <[email protected]> | 2022-02-07 20:21:13 -0800 |
|---|---|---|
| committer | Kees Cook <[email protected]> | 2022-02-10 19:09:12 -0800 |
| commit | 495ac3069a6235bfdf516812a2a9b256671bbdf9 (patch) | |
| tree | 5af379028a8b12efb8193fee1737ea4ebe968969 /scripts/gdb/linux/utils.py | |
| parent | 5c72263ef2fbe99596848f03758ae2dc593adf2c (diff) | |
seccomp: Invalidate seccomp mode to catch death failures
If seccomp tries to kill a process, it should never see that process
again. To enforce this proactively, switch the mode to something
impossible. If encountered: WARN, reject all syscalls, and attempt to
kill the process again even harder.
Cc: Andy Lutomirski <[email protected]>
Cc: Will Drewry <[email protected]>
Fixes: 8112c4f140fa ("seccomp: remove 2-phase API")
Cc: [email protected]
Signed-off-by: Kees Cook <[email protected]>
Diffstat (limited to 'scripts/gdb/linux/utils.py')
0 files changed, 0 insertions, 0 deletions