seccomp: Introduce SECCOMP_RET_KILL_PROCESS

Browse source

This introduces the BPF return value for SECCOMP_RET_KILL_PROCESS to kill
an entire process. This cannot yet be reached by seccomp, but it changes
the default-kill behavior (for unknown return values) from kill-thread to
kill-process.

Signed-off-by: Kees Cook <keescook@chromium.org>

...

This commit is contained in:

Kees Cook 2017-08-11 13:01:39 -07:00

parent fd76875ca2

commit 4d3b0b05aa

2 changed files with 26 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

18

include/uapi/linux/seccomp.h

View file

22

kernel/seccomp.c

View file