Kees Cook 58d0a862f5 seccomp: add tests for ptrace hole ...

One problem with seccomp was that ptrace could be used to change a
syscall after seccomp filtering had completed. This was a well documented
limitation, and it was recommended to block ptrace when defining a filter
to avoid this problem. This can be quite a limitation for containers or
other places where ptrace is desired even under seccomp filters.

This adds tests for both SECCOMP_RET_TRACE and PTRACE_SYSCALL manipulations.

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andy Lutomirski <luto@kernel.org>

2016-06-14 10:54:38 -07:00

..

.gitignore

selftests: add seccomp suite

2015-06-17 17:12:32 -06:00

config

selftests: create test-specific kconfig fragments

2016-02-25 09:47:52 -07:00

Makefile

selftests: add seccomp suite

2015-06-17 17:12:32 -06:00

seccomp_bpf.c

seccomp: add tests for ptrace hole

2016-06-14 10:54:38 -07:00

test_harness.h

selftests/seccomp: fix 32-bit build warnings

2016-01-07 13:40:20 -07:00