QingdaoU/Judger
1
0
Fork 0
mirror of https://github.com/QingdaoU/Judger.git synced 2024-12-28 16:01:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

完善general规则

Browse Source
This commit is contained in:
LiYang 2016-10-23 01:56:35 +08:00
parent 7b61b9f9db
commit b71625bedb
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/rules/general.c
View File

@ -6,7 +6,15 @@
int general_seccomp_rules(struct config *_config) {
int syscalls_blacklist[] = {SCMP_SYS(socket), SCMP_SYS(clone),
SCMP_SYS(fork)};
SCMP_SYS(fork), SCMP_SYS(vfork),
SCMP_SYS(writev), SCMP_SYS(kill),
SCMP_SYS(chdir), SCMP_SYS(fchdir),
SCMP_SYS(rename), SCMP_SYS(chmod),
SCMP_SYS(fchmod), SCMP_SYS(chown),
SCMP_SYS(fchown), SCMP_SYS(lchown),
SCMP_SYS(setuid), SCMP_SYS(setgid),
SCMP_SYS(capset), SCMP_SYS(mount),
SCMP_SYS(sethostname)};
int syscalls_blacklist_length = sizeof(syscalls_blacklist) / sizeof(int);
scmp_filter_ctx ctx = NULL;
// load seccomp rules