[Webkit-unassigned] [Bug 142983] New: [Seccomp] Set appropriate filters when trapping syscalls by default

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Mar 23 14:30:41 PDT 2015


            Bug ID: 142983
           Summary: [Seccomp] Set appropriate filters when trapping
                    syscalls by default
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com

If we trap syscalls by default, we must not manually set any filters to trap anything, since it will fail causing us to crash.

But also, there are some things we must allow unconditionally even when trapping by default, for the broker to work. sigreturn, obviously, and brk.

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150323/98dce417/attachment-0002.html>

More information about the webkit-unassigned mailing list