[Webkit-unassigned] [Bug 142983] New: [Seccomp] Set appropriate filters when trapping syscalls by default

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=142983

            Bug ID: 142983
           Summary: [Seccomp] Set appropriate filters when trapping
                    syscalls by default
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com

If we trap syscalls by default, we must not manually set any filters to trap anything, since it will fail causing us to crash.

But also, there are some things we must allow unconditionally even when trapping by default, for the broker to work. sigreturn, obviously, and brk.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150323/98dce417/attachment-0002.html>