genode/tool/seccomp
Stefan Thöni 78497c03ca base-linux: enabled seccomp
base-linux uses seccomp to reduce the available system calls
to the minimum set needed to run base-linux. There are still
some syscalls that allow accessing global state which should
be further reduced.

The combination of seccomp and socket descriptor caps should
provide an intermediate level of security for base-linux
thereby enabling base-linux as a migration path from using
the Linux kernel to the use of microkernel-based Genode.

Fixes #3581
2020-05-27 11:56:46 +02:00
..
Makefile base-linux: enabled seccomp 2020-05-27 11:56:46 +02:00
seccomp_bpf_compiler_arm.cc base-linux: enabled seccomp 2020-05-27 11:56:46 +02:00
seccomp_bpf_compiler_x86_32.cc base-linux: enabled seccomp 2020-05-27 11:56:46 +02:00
seccomp_bpf_compiler_x86_64.cc base-linux: enabled seccomp 2020-05-27 11:56:46 +02:00
seccomp_bpf_compiler.h base-linux: enabled seccomp 2020-05-27 11:56:46 +02:00