| OLD | NEW |
|---|
| (Empty) | |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h" |
| 6 |
| 7 #include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h" |
| 8 #include "sandbox/linux/seccomp-bpf/bpf_tests.h" |
| 9 |
| 10 namespace { |
| 11 |
| 12 // Test cases in this file just make sure not-whitelisted syscalls |
| 13 // are appropriately disallowed. They should raise SIGSYS regardless |
| 14 // of arguments. We always pass five zeros not to pass uninitialized |
| 15 // values to syscalls. |
| 16 #define RESTRICT_SYSCALL_DEATH_TEST_IMPL(name, sysno) \ |
| 17 BPF_DEATH_TEST( \ |
| 18 NaClNonSfiSandboxSIGSYSTest, name, \ |
| 19 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), \ |
| 20 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) { \ |
| 21 syscall(sysno, 0, 0, 0, 0, 0); \ |
| 22 } |
| 23 |
| 24 #define RESTRICT_SYSCALL_DEATH_TEST(name) \ |
| 25 RESTRICT_SYSCALL_DEATH_TEST_IMPL(name, __NR_ ## name) |
| 26 |
| 27 #define RESTRICT_ARM_SYSCALL_DEATH_TEST(name) \ |
| 28 RESTRICT_SYSCALL_DEATH_TEST_IMPL(ARM_ ## name, __ARM_NR_ ## name) |
| 29 |
| 30 #if defined(__i386__) || defined(__arm__) |
| 31 RESTRICT_SYSCALL_DEATH_TEST(_newselect); |
| 32 #endif |
| 33 RESTRICT_SYSCALL_DEATH_TEST(_sysctl); |
| 34 #if defined(__x86_64__) || defined(__arm__) |
| 35 RESTRICT_SYSCALL_DEATH_TEST(accept); |
| 36 #endif |
| 37 #if defined(__x86_64__) || defined(__arm__) |
| 38 RESTRICT_SYSCALL_DEATH_TEST(accept4); |
| 39 #endif |
| 40 RESTRICT_SYSCALL_DEATH_TEST(access); |
| 41 RESTRICT_SYSCALL_DEATH_TEST(acct); |
| 42 RESTRICT_SYSCALL_DEATH_TEST(add_key); |
| 43 RESTRICT_SYSCALL_DEATH_TEST(adjtimex); |
| 44 #if defined(__i386__) || defined(__x86_64__) |
| 45 RESTRICT_SYSCALL_DEATH_TEST(afs_syscall); |
| 46 #endif |
| 47 #if defined(__i386__) || defined(__x86_64__) |
| 48 RESTRICT_SYSCALL_DEATH_TEST(alarm); |
| 49 #endif |
| 50 #if defined(__x86_64__) |
| 51 RESTRICT_SYSCALL_DEATH_TEST(arch_prctl); |
| 52 #endif |
| 53 #if defined(__arm__) |
| 54 RESTRICT_SYSCALL_DEATH_TEST(arm_fadvise64_64); |
| 55 #endif |
| 56 #if defined(__i386__) || defined(__arm__) |
| 57 RESTRICT_SYSCALL_DEATH_TEST(bdflush); |
| 58 #endif |
| 59 #if defined(__x86_64__) || defined(__arm__) |
| 60 RESTRICT_SYSCALL_DEATH_TEST(bind); |
| 61 #endif |
| 62 #if defined(__i386__) |
| 63 RESTRICT_SYSCALL_DEATH_TEST(break); |
| 64 #endif |
| 65 RESTRICT_SYSCALL_DEATH_TEST(capget); |
| 66 RESTRICT_SYSCALL_DEATH_TEST(capset); |
| 67 RESTRICT_SYSCALL_DEATH_TEST(chdir); |
| 68 RESTRICT_SYSCALL_DEATH_TEST(chmod); |
| 69 RESTRICT_SYSCALL_DEATH_TEST(chown); |
| 70 #if defined(__i386__) || defined(__arm__) |
| 71 RESTRICT_SYSCALL_DEATH_TEST(chown32); |
| 72 #endif |
| 73 RESTRICT_SYSCALL_DEATH_TEST(chroot); |
| 74 RESTRICT_SYSCALL_DEATH_TEST(clock_adjtime); |
| 75 RESTRICT_SYSCALL_DEATH_TEST(clock_nanosleep); |
| 76 RESTRICT_SYSCALL_DEATH_TEST(clock_settime); |
| 77 #if defined(__x86_64__) || defined(__arm__) |
| 78 RESTRICT_SYSCALL_DEATH_TEST(connect); |
| 79 #endif |
| 80 RESTRICT_SYSCALL_DEATH_TEST(creat); |
| 81 #if defined(__i386__) || defined(__x86_64__) |
| 82 RESTRICT_SYSCALL_DEATH_TEST(create_module); |
| 83 #endif |
| 84 RESTRICT_SYSCALL_DEATH_TEST(delete_module); |
| 85 RESTRICT_SYSCALL_DEATH_TEST(dup3); |
| 86 RESTRICT_SYSCALL_DEATH_TEST(epoll_create1); |
| 87 #if defined(__x86_64__) |
| 88 RESTRICT_SYSCALL_DEATH_TEST(epoll_ctl_old); |
| 89 #endif |
| 90 RESTRICT_SYSCALL_DEATH_TEST(epoll_pwait); |
| 91 #if defined(__x86_64__) |
| 92 RESTRICT_SYSCALL_DEATH_TEST(epoll_wait_old); |
| 93 #endif |
| 94 RESTRICT_SYSCALL_DEATH_TEST(eventfd); |
| 95 RESTRICT_SYSCALL_DEATH_TEST(eventfd2); |
| 96 RESTRICT_SYSCALL_DEATH_TEST(execve); |
| 97 RESTRICT_SYSCALL_DEATH_TEST(faccessat); |
| 98 #if defined(__i386__) || defined(__x86_64__) |
| 99 RESTRICT_SYSCALL_DEATH_TEST(fadvise64); |
| 100 #endif |
| 101 #if defined(__i386__) |
| 102 RESTRICT_SYSCALL_DEATH_TEST(fadvise64_64); |
| 103 #endif |
| 104 RESTRICT_SYSCALL_DEATH_TEST(fallocate); |
| 105 RESTRICT_SYSCALL_DEATH_TEST(fanotify_init); |
| 106 RESTRICT_SYSCALL_DEATH_TEST(fanotify_mark); |
| 107 RESTRICT_SYSCALL_DEATH_TEST(fchdir); |
| 108 RESTRICT_SYSCALL_DEATH_TEST(fchmod); |
| 109 RESTRICT_SYSCALL_DEATH_TEST(fchmodat); |
| 110 RESTRICT_SYSCALL_DEATH_TEST(fchown); |
| 111 #if defined(__i386__) || defined(__arm__) |
| 112 RESTRICT_SYSCALL_DEATH_TEST(fchown32); |
| 113 #endif |
| 114 RESTRICT_SYSCALL_DEATH_TEST(fchownat); |
| 115 #if defined(__i386__) || defined(__arm__) |
| 116 RESTRICT_SYSCALL_DEATH_TEST(fcntl); |
| 117 #endif |
| 118 RESTRICT_SYSCALL_DEATH_TEST(fdatasync); |
| 119 RESTRICT_SYSCALL_DEATH_TEST(fgetxattr); |
| 120 RESTRICT_SYSCALL_DEATH_TEST(flistxattr); |
| 121 RESTRICT_SYSCALL_DEATH_TEST(flock); |
| 122 RESTRICT_SYSCALL_DEATH_TEST(fork); |
| 123 RESTRICT_SYSCALL_DEATH_TEST(fremovexattr); |
| 124 RESTRICT_SYSCALL_DEATH_TEST(fsetxattr); |
| 125 #if defined(__i386__) || defined(__arm__) |
| 126 RESTRICT_SYSCALL_DEATH_TEST(fstat); |
| 127 #endif |
| 128 #if defined(__i386__) || defined(__arm__) |
| 129 RESTRICT_SYSCALL_DEATH_TEST(fstatat64); |
| 130 #endif |
| 131 RESTRICT_SYSCALL_DEATH_TEST(fstatfs); |
| 132 #if defined(__i386__) || defined(__arm__) |
| 133 RESTRICT_SYSCALL_DEATH_TEST(fstatfs64); |
| 134 #endif |
| 135 RESTRICT_SYSCALL_DEATH_TEST(fsync); |
| 136 #if defined(__i386__) |
| 137 RESTRICT_SYSCALL_DEATH_TEST(ftime); |
| 138 #endif |
| 139 RESTRICT_SYSCALL_DEATH_TEST(ftruncate); |
| 140 #if defined(__i386__) || defined(__arm__) |
| 141 RESTRICT_SYSCALL_DEATH_TEST(ftruncate64); |
| 142 #endif |
| 143 RESTRICT_SYSCALL_DEATH_TEST(futimesat); |
| 144 #if defined(__i386__) || defined(__x86_64__) |
| 145 RESTRICT_SYSCALL_DEATH_TEST(get_kernel_syms); |
| 146 #endif |
| 147 RESTRICT_SYSCALL_DEATH_TEST(get_mempolicy); |
| 148 RESTRICT_SYSCALL_DEATH_TEST(get_robust_list); |
| 149 #if defined(__i386__) || defined(__x86_64__) |
| 150 RESTRICT_SYSCALL_DEATH_TEST(get_thread_area); |
| 151 #endif |
| 152 RESTRICT_SYSCALL_DEATH_TEST(getcpu); |
| 153 RESTRICT_SYSCALL_DEATH_TEST(getcwd); |
| 154 RESTRICT_SYSCALL_DEATH_TEST(getdents); |
| 155 RESTRICT_SYSCALL_DEATH_TEST(getdents64); |
| 156 RESTRICT_SYSCALL_DEATH_TEST(getgroups); |
| 157 #if defined(__i386__) || defined(__arm__) |
| 158 RESTRICT_SYSCALL_DEATH_TEST(getgroups32); |
| 159 #endif |
| 160 RESTRICT_SYSCALL_DEATH_TEST(getitimer); |
| 161 #if defined(__x86_64__) || defined(__arm__) |
| 162 RESTRICT_SYSCALL_DEATH_TEST(getpeername); |
| 163 #endif |
| 164 RESTRICT_SYSCALL_DEATH_TEST(getpgid); |
| 165 RESTRICT_SYSCALL_DEATH_TEST(getpgrp); |
| 166 RESTRICT_SYSCALL_DEATH_TEST(getpid); |
| 167 #if defined(__i386__) || defined(__x86_64__) |
| 168 RESTRICT_SYSCALL_DEATH_TEST(getpmsg); |
| 169 #endif |
| 170 RESTRICT_SYSCALL_DEATH_TEST(getppid); |
| 171 RESTRICT_SYSCALL_DEATH_TEST(getpriority); |
| 172 RESTRICT_SYSCALL_DEATH_TEST(getresgid); |
| 173 #if defined(__i386__) || defined(__arm__) |
| 174 RESTRICT_SYSCALL_DEATH_TEST(getresgid32); |
| 175 #endif |
| 176 RESTRICT_SYSCALL_DEATH_TEST(getresuid); |
| 177 #if defined(__i386__) || defined(__arm__) |
| 178 RESTRICT_SYSCALL_DEATH_TEST(getresuid32); |
| 179 #endif |
| 180 #if defined(__i386__) || defined(__x86_64__) |
| 181 RESTRICT_SYSCALL_DEATH_TEST(getrlimit); |
| 182 #endif |
| 183 RESTRICT_SYSCALL_DEATH_TEST(getrusage); |
| 184 RESTRICT_SYSCALL_DEATH_TEST(getsid); |
| 185 #if defined(__x86_64__) || defined(__arm__) |
| 186 RESTRICT_SYSCALL_DEATH_TEST(getsockname); |
| 187 #endif |
| 188 #if defined(__x86_64__) || defined(__arm__) |
| 189 RESTRICT_SYSCALL_DEATH_TEST(getsockopt); |
| 190 #endif |
| 191 RESTRICT_SYSCALL_DEATH_TEST(getxattr); |
| 192 #if defined(__i386__) |
| 193 RESTRICT_SYSCALL_DEATH_TEST(gtty); |
| 194 #endif |
| 195 #if defined(__i386__) |
| 196 RESTRICT_SYSCALL_DEATH_TEST(idle); |
| 197 #endif |
| 198 RESTRICT_SYSCALL_DEATH_TEST(init_module); |
| 199 RESTRICT_SYSCALL_DEATH_TEST(inotify_add_watch); |
| 200 RESTRICT_SYSCALL_DEATH_TEST(inotify_init); |
| 201 RESTRICT_SYSCALL_DEATH_TEST(inotify_init1); |
| 202 RESTRICT_SYSCALL_DEATH_TEST(inotify_rm_watch); |
| 203 RESTRICT_SYSCALL_DEATH_TEST(io_cancel); |
| 204 RESTRICT_SYSCALL_DEATH_TEST(io_destroy); |
| 205 RESTRICT_SYSCALL_DEATH_TEST(io_getevents); |
| 206 RESTRICT_SYSCALL_DEATH_TEST(io_setup); |
| 207 RESTRICT_SYSCALL_DEATH_TEST(io_submit); |
| 208 RESTRICT_SYSCALL_DEATH_TEST(ioctl); |
| 209 #if defined(__i386__) || defined(__x86_64__) |
| 210 RESTRICT_SYSCALL_DEATH_TEST(ioperm); |
| 211 #endif |
| 212 #if defined(__i386__) || defined(__x86_64__) |
| 213 RESTRICT_SYSCALL_DEATH_TEST(iopl); |
| 214 #endif |
| 215 RESTRICT_SYSCALL_DEATH_TEST(ioprio_get); |
| 216 RESTRICT_SYSCALL_DEATH_TEST(ioprio_set); |
| 217 #if defined(__i386__) |
| 218 RESTRICT_SYSCALL_DEATH_TEST(ipc); |
| 219 #endif |
| 220 RESTRICT_SYSCALL_DEATH_TEST(kexec_load); |
| 221 RESTRICT_SYSCALL_DEATH_TEST(keyctl); |
| 222 RESTRICT_SYSCALL_DEATH_TEST(kill); |
| 223 RESTRICT_SYSCALL_DEATH_TEST(lchown); |
| 224 #if defined(__i386__) || defined(__arm__) |
| 225 RESTRICT_SYSCALL_DEATH_TEST(lchown32); |
| 226 #endif |
| 227 RESTRICT_SYSCALL_DEATH_TEST(lgetxattr); |
| 228 RESTRICT_SYSCALL_DEATH_TEST(link); |
| 229 RESTRICT_SYSCALL_DEATH_TEST(linkat); |
| 230 #if defined(__x86_64__) || defined(__arm__) |
| 231 RESTRICT_SYSCALL_DEATH_TEST(listen); |
| 232 #endif |
| 233 RESTRICT_SYSCALL_DEATH_TEST(listxattr); |
| 234 RESTRICT_SYSCALL_DEATH_TEST(llistxattr); |
| 235 #if defined(__i386__) |
| 236 RESTRICT_SYSCALL_DEATH_TEST(lock); |
| 237 #endif |
| 238 RESTRICT_SYSCALL_DEATH_TEST(lookup_dcookie); |
| 239 RESTRICT_SYSCALL_DEATH_TEST(lremovexattr); |
| 240 #if defined(__i386__) || defined(__arm__) |
| 241 RESTRICT_SYSCALL_DEATH_TEST(lseek); |
| 242 #endif |
| 243 RESTRICT_SYSCALL_DEATH_TEST(lsetxattr); |
| 244 RESTRICT_SYSCALL_DEATH_TEST(lstat); |
| 245 #if defined(__i386__) || defined(__arm__) |
| 246 RESTRICT_SYSCALL_DEATH_TEST(lstat64); |
| 247 #endif |
| 248 RESTRICT_SYSCALL_DEATH_TEST(mbind); |
| 249 #if defined(__i386__) || defined(__x86_64__) |
| 250 RESTRICT_SYSCALL_DEATH_TEST(migrate_pages); |
| 251 #endif |
| 252 RESTRICT_SYSCALL_DEATH_TEST(mincore); |
| 253 RESTRICT_SYSCALL_DEATH_TEST(mkdir); |
| 254 RESTRICT_SYSCALL_DEATH_TEST(mkdirat); |
| 255 RESTRICT_SYSCALL_DEATH_TEST(mknod); |
| 256 RESTRICT_SYSCALL_DEATH_TEST(mknodat); |
| 257 RESTRICT_SYSCALL_DEATH_TEST(mlock); |
| 258 RESTRICT_SYSCALL_DEATH_TEST(mlockall); |
| 259 #if defined(__i386__) |
| 260 RESTRICT_SYSCALL_DEATH_TEST(mmap); |
| 261 #endif |
| 262 #if defined(__i386__) || defined(__x86_64__) |
| 263 RESTRICT_SYSCALL_DEATH_TEST(modify_ldt); |
| 264 #endif |
| 265 RESTRICT_SYSCALL_DEATH_TEST(mount); |
| 266 RESTRICT_SYSCALL_DEATH_TEST(move_pages); |
| 267 #if defined(__i386__) |
| 268 RESTRICT_SYSCALL_DEATH_TEST(mpx); |
| 269 #endif |
| 270 RESTRICT_SYSCALL_DEATH_TEST(mq_getsetattr); |
| 271 RESTRICT_SYSCALL_DEATH_TEST(mq_notify); |
| 272 RESTRICT_SYSCALL_DEATH_TEST(mq_open); |
| 273 RESTRICT_SYSCALL_DEATH_TEST(mq_timedreceive); |
| 274 RESTRICT_SYSCALL_DEATH_TEST(mq_timedsend); |
| 275 RESTRICT_SYSCALL_DEATH_TEST(mq_unlink); |
| 276 RESTRICT_SYSCALL_DEATH_TEST(mremap); |
| 277 #if defined(__x86_64__) || defined(__arm__) |
| 278 RESTRICT_SYSCALL_DEATH_TEST(msgctl); |
| 279 #endif |
| 280 #if defined(__x86_64__) || defined(__arm__) |
| 281 RESTRICT_SYSCALL_DEATH_TEST(msgget); |
| 282 #endif |
| 283 #if defined(__x86_64__) || defined(__arm__) |
| 284 RESTRICT_SYSCALL_DEATH_TEST(msgrcv); |
| 285 #endif |
| 286 #if defined(__x86_64__) || defined(__arm__) |
| 287 RESTRICT_SYSCALL_DEATH_TEST(msgsnd); |
| 288 #endif |
| 289 RESTRICT_SYSCALL_DEATH_TEST(msync); |
| 290 RESTRICT_SYSCALL_DEATH_TEST(munlock); |
| 291 RESTRICT_SYSCALL_DEATH_TEST(munlockall); |
| 292 RESTRICT_SYSCALL_DEATH_TEST(name_to_handle_at); |
| 293 #if defined(__x86_64__) |
| 294 RESTRICT_SYSCALL_DEATH_TEST(newfstatat); |
| 295 #endif |
| 296 RESTRICT_SYSCALL_DEATH_TEST(nfsservctl); |
| 297 #if defined(__i386__) || defined(__arm__) |
| 298 RESTRICT_SYSCALL_DEATH_TEST(nice); |
| 299 #endif |
| 300 #if defined(__i386__) |
| 301 RESTRICT_SYSCALL_DEATH_TEST(oldfstat); |
| 302 #endif |
| 303 #if defined(__i386__) |
| 304 RESTRICT_SYSCALL_DEATH_TEST(oldlstat); |
| 305 #endif |
| 306 #if defined(__i386__) |
| 307 RESTRICT_SYSCALL_DEATH_TEST(oldolduname); |
| 308 #endif |
| 309 #if defined(__i386__) |
| 310 RESTRICT_SYSCALL_DEATH_TEST(oldstat); |
| 311 #endif |
| 312 #if defined(__i386__) |
| 313 RESTRICT_SYSCALL_DEATH_TEST(olduname); |
| 314 #endif |
| 315 RESTRICT_SYSCALL_DEATH_TEST(open_by_handle_at); |
| 316 RESTRICT_SYSCALL_DEATH_TEST(openat); |
| 317 RESTRICT_SYSCALL_DEATH_TEST(pause); |
| 318 #if defined(__arm__) |
| 319 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_iobase); |
| 320 #endif |
| 321 #if defined(__arm__) |
| 322 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_read); |
| 323 #endif |
| 324 #if defined(__arm__) |
| 325 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_write); |
| 326 #endif |
| 327 RESTRICT_SYSCALL_DEATH_TEST(perf_event_open); |
| 328 RESTRICT_SYSCALL_DEATH_TEST(personality); |
| 329 RESTRICT_SYSCALL_DEATH_TEST(pipe2); |
| 330 RESTRICT_SYSCALL_DEATH_TEST(pivot_root); |
| 331 RESTRICT_SYSCALL_DEATH_TEST(poll); |
| 332 RESTRICT_SYSCALL_DEATH_TEST(ppoll); |
| 333 RESTRICT_SYSCALL_DEATH_TEST(preadv); |
| 334 RESTRICT_SYSCALL_DEATH_TEST(prlimit64); |
| 335 RESTRICT_SYSCALL_DEATH_TEST(process_vm_readv); |
| 336 RESTRICT_SYSCALL_DEATH_TEST(process_vm_writev); |
| 337 #if defined(__i386__) |
| 338 RESTRICT_SYSCALL_DEATH_TEST(prof); |
| 339 #endif |
| 340 #if defined(__i386__) |
| 341 RESTRICT_SYSCALL_DEATH_TEST(profil); |
| 342 #endif |
| 343 RESTRICT_SYSCALL_DEATH_TEST(pselect6); |
| 344 #if defined(__i386__) || defined(__x86_64__) |
| 345 RESTRICT_SYSCALL_DEATH_TEST(putpmsg); |
| 346 #endif |
| 347 RESTRICT_SYSCALL_DEATH_TEST(pwritev); |
| 348 #if defined(__i386__) || defined(__x86_64__) |
| 349 RESTRICT_SYSCALL_DEATH_TEST(query_module); |
| 350 #endif |
| 351 RESTRICT_SYSCALL_DEATH_TEST(quotactl); |
| 352 RESTRICT_SYSCALL_DEATH_TEST(readahead); |
| 353 #if defined(__i386__) |
| 354 RESTRICT_SYSCALL_DEATH_TEST(readdir); |
| 355 #endif |
| 356 RESTRICT_SYSCALL_DEATH_TEST(readlink); |
| 357 RESTRICT_SYSCALL_DEATH_TEST(readlinkat); |
| 358 RESTRICT_SYSCALL_DEATH_TEST(readv); |
| 359 RESTRICT_SYSCALL_DEATH_TEST(reboot); |
| 360 #if defined(__arm__) |
| 361 RESTRICT_SYSCALL_DEATH_TEST(recv); |
| 362 #endif |
| 363 #if defined(__x86_64__) || defined(__arm__) |
| 364 RESTRICT_SYSCALL_DEATH_TEST(recvfrom); |
| 365 #endif |
| 366 RESTRICT_SYSCALL_DEATH_TEST(recvmmsg); |
| 367 RESTRICT_SYSCALL_DEATH_TEST(remap_file_pages); |
| 368 RESTRICT_SYSCALL_DEATH_TEST(removexattr); |
| 369 RESTRICT_SYSCALL_DEATH_TEST(rename); |
| 370 RESTRICT_SYSCALL_DEATH_TEST(renameat); |
| 371 RESTRICT_SYSCALL_DEATH_TEST(request_key); |
| 372 RESTRICT_SYSCALL_DEATH_TEST(rmdir); |
| 373 RESTRICT_SYSCALL_DEATH_TEST(rt_sigaction); |
| 374 RESTRICT_SYSCALL_DEATH_TEST(rt_sigpending); |
| 375 RESTRICT_SYSCALL_DEATH_TEST(rt_sigprocmask); |
| 376 RESTRICT_SYSCALL_DEATH_TEST(rt_sigqueueinfo); |
| 377 RESTRICT_SYSCALL_DEATH_TEST(rt_sigreturn); |
| 378 RESTRICT_SYSCALL_DEATH_TEST(rt_sigsuspend); |
| 379 RESTRICT_SYSCALL_DEATH_TEST(rt_sigtimedwait); |
| 380 RESTRICT_SYSCALL_DEATH_TEST(rt_tgsigqueueinfo); |
| 381 RESTRICT_SYSCALL_DEATH_TEST(sched_get_priority_max); |
| 382 RESTRICT_SYSCALL_DEATH_TEST(sched_get_priority_min); |
| 383 RESTRICT_SYSCALL_DEATH_TEST(sched_getaffinity); |
| 384 RESTRICT_SYSCALL_DEATH_TEST(sched_getparam); |
| 385 RESTRICT_SYSCALL_DEATH_TEST(sched_getscheduler); |
| 386 RESTRICT_SYSCALL_DEATH_TEST(sched_rr_get_interval); |
| 387 RESTRICT_SYSCALL_DEATH_TEST(sched_setaffinity); |
| 388 RESTRICT_SYSCALL_DEATH_TEST(sched_setparam); |
| 389 RESTRICT_SYSCALL_DEATH_TEST(sched_setscheduler); |
| 390 #if defined(__x86_64__) |
| 391 RESTRICT_SYSCALL_DEATH_TEST(security); |
| 392 #endif |
| 393 #if defined(__i386__) || defined(__x86_64__) |
| 394 RESTRICT_SYSCALL_DEATH_TEST(select); |
| 395 #endif |
| 396 #if defined(__x86_64__) || defined(__arm__) |
| 397 RESTRICT_SYSCALL_DEATH_TEST(semctl); |
| 398 #endif |
| 399 #if defined(__x86_64__) || defined(__arm__) |
| 400 RESTRICT_SYSCALL_DEATH_TEST(semget); |
| 401 #endif |
| 402 #if defined(__x86_64__) || defined(__arm__) |
| 403 RESTRICT_SYSCALL_DEATH_TEST(semop); |
| 404 #endif |
| 405 #if defined(__x86_64__) || defined(__arm__) |
| 406 RESTRICT_SYSCALL_DEATH_TEST(semtimedop); |
| 407 #endif |
| 408 #if defined(__arm__) |
| 409 RESTRICT_SYSCALL_DEATH_TEST(send); |
| 410 #endif |
| 411 RESTRICT_SYSCALL_DEATH_TEST(sendfile); |
| 412 #if defined(__i386__) || defined(__arm__) |
| 413 RESTRICT_SYSCALL_DEATH_TEST(sendfile64); |
| 414 #endif |
| 415 RESTRICT_SYSCALL_DEATH_TEST(sendmmsg); |
| 416 #if defined(__x86_64__) || defined(__arm__) |
| 417 RESTRICT_SYSCALL_DEATH_TEST(sendto); |
| 418 #endif |
| 419 RESTRICT_SYSCALL_DEATH_TEST(set_mempolicy); |
| 420 #if defined(__i386__) || defined(__x86_64__) |
| 421 RESTRICT_SYSCALL_DEATH_TEST(set_thread_area); |
| 422 #endif |
| 423 RESTRICT_SYSCALL_DEATH_TEST(set_tid_address); |
| 424 RESTRICT_SYSCALL_DEATH_TEST(setdomainname); |
| 425 RESTRICT_SYSCALL_DEATH_TEST(setfsgid); |
| 426 #if defined(__i386__) || defined(__arm__) |
| 427 RESTRICT_SYSCALL_DEATH_TEST(setfsgid32); |
| 428 #endif |
| 429 RESTRICT_SYSCALL_DEATH_TEST(setfsuid); |
| 430 #if defined(__i386__) || defined(__arm__) |
| 431 RESTRICT_SYSCALL_DEATH_TEST(setfsuid32); |
| 432 #endif |
| 433 RESTRICT_SYSCALL_DEATH_TEST(setgid); |
| 434 #if defined(__i386__) || defined(__arm__) |
| 435 RESTRICT_SYSCALL_DEATH_TEST(setgid32); |
| 436 #endif |
| 437 RESTRICT_SYSCALL_DEATH_TEST(setgroups); |
| 438 #if defined(__i386__) || defined(__arm__) |
| 439 RESTRICT_SYSCALL_DEATH_TEST(setgroups32); |
| 440 #endif |
| 441 RESTRICT_SYSCALL_DEATH_TEST(sethostname); |
| 442 RESTRICT_SYSCALL_DEATH_TEST(setitimer); |
| 443 RESTRICT_SYSCALL_DEATH_TEST(setns); |
| 444 RESTRICT_SYSCALL_DEATH_TEST(setpgid); |
| 445 RESTRICT_SYSCALL_DEATH_TEST(setpriority); |
| 446 RESTRICT_SYSCALL_DEATH_TEST(setregid); |
| 447 #if defined(__i386__) || defined(__arm__) |
| 448 RESTRICT_SYSCALL_DEATH_TEST(setregid32); |
| 449 #endif |
| 450 RESTRICT_SYSCALL_DEATH_TEST(setresgid); |
| 451 #if defined(__i386__) || defined(__arm__) |
| 452 RESTRICT_SYSCALL_DEATH_TEST(setresgid32); |
| 453 #endif |
| 454 RESTRICT_SYSCALL_DEATH_TEST(setresuid); |
| 455 #if defined(__i386__) || defined(__arm__) |
| 456 RESTRICT_SYSCALL_DEATH_TEST(setresuid32); |
| 457 #endif |
| 458 RESTRICT_SYSCALL_DEATH_TEST(setreuid); |
| 459 #if defined(__i386__) || defined(__arm__) |
| 460 RESTRICT_SYSCALL_DEATH_TEST(setreuid32); |
| 461 #endif |
| 462 RESTRICT_SYSCALL_DEATH_TEST(setrlimit); |
| 463 RESTRICT_SYSCALL_DEATH_TEST(setsid); |
| 464 #if defined(__x86_64__) || defined(__arm__) |
| 465 RESTRICT_SYSCALL_DEATH_TEST(setsockopt); |
| 466 #endif |
| 467 RESTRICT_SYSCALL_DEATH_TEST(settimeofday); |
| 468 RESTRICT_SYSCALL_DEATH_TEST(setuid); |
| 469 #if defined(__i386__) || defined(__arm__) |
| 470 RESTRICT_SYSCALL_DEATH_TEST(setuid32); |
| 471 #endif |
| 472 RESTRICT_SYSCALL_DEATH_TEST(setxattr); |
| 473 #if defined(__i386__) |
| 474 RESTRICT_SYSCALL_DEATH_TEST(sgetmask); |
| 475 #endif |
| 476 #if defined(__x86_64__) || defined(__arm__) |
| 477 RESTRICT_SYSCALL_DEATH_TEST(shmat); |
| 478 #endif |
| 479 #if defined(__x86_64__) || defined(__arm__) |
| 480 RESTRICT_SYSCALL_DEATH_TEST(shmctl); |
| 481 #endif |
| 482 #if defined(__x86_64__) || defined(__arm__) |
| 483 RESTRICT_SYSCALL_DEATH_TEST(shmdt); |
| 484 #endif |
| 485 #if defined(__x86_64__) || defined(__arm__) |
| 486 RESTRICT_SYSCALL_DEATH_TEST(shmget); |
| 487 #endif |
| 488 #if defined(__i386__) || defined(__arm__) |
| 489 RESTRICT_SYSCALL_DEATH_TEST(sigaction); |
| 490 #endif |
| 491 #if defined(__i386__) |
| 492 RESTRICT_SYSCALL_DEATH_TEST(signal); |
| 493 #endif |
| 494 RESTRICT_SYSCALL_DEATH_TEST(signalfd); |
| 495 RESTRICT_SYSCALL_DEATH_TEST(signalfd4); |
| 496 #if defined(__i386__) || defined(__arm__) |
| 497 RESTRICT_SYSCALL_DEATH_TEST(sigpending); |
| 498 #endif |
| 499 #if defined(__i386__) || defined(__arm__) |
| 500 RESTRICT_SYSCALL_DEATH_TEST(sigprocmask); |
| 501 #endif |
| 502 #if defined(__i386__) || defined(__arm__) |
| 503 RESTRICT_SYSCALL_DEATH_TEST(sigreturn); |
| 504 #endif |
| 505 #if defined(__i386__) || defined(__arm__) |
| 506 RESTRICT_SYSCALL_DEATH_TEST(sigsuspend); |
| 507 #endif |
| 508 #if defined(__x86_64__) || defined(__arm__) |
| 509 RESTRICT_SYSCALL_DEATH_TEST(socket); |
| 510 #endif |
| 511 RESTRICT_SYSCALL_DEATH_TEST(splice); |
| 512 #if defined(__i386__) |
| 513 RESTRICT_SYSCALL_DEATH_TEST(ssetmask); |
| 514 #endif |
| 515 RESTRICT_SYSCALL_DEATH_TEST(stat); |
| 516 #if defined(__i386__) || defined(__arm__) |
| 517 RESTRICT_SYSCALL_DEATH_TEST(stat64); |
| 518 #endif |
| 519 RESTRICT_SYSCALL_DEATH_TEST(statfs); |
| 520 #if defined(__i386__) || defined(__arm__) |
| 521 RESTRICT_SYSCALL_DEATH_TEST(statfs64); |
| 522 #endif |
| 523 #if defined(__i386__) |
| 524 RESTRICT_SYSCALL_DEATH_TEST(stime); |
| 525 #endif |
| 526 #if defined(__i386__) |
| 527 RESTRICT_SYSCALL_DEATH_TEST(stty); |
| 528 #endif |
| 529 RESTRICT_SYSCALL_DEATH_TEST(swapoff); |
| 530 RESTRICT_SYSCALL_DEATH_TEST(swapon); |
| 531 RESTRICT_SYSCALL_DEATH_TEST(symlink); |
| 532 RESTRICT_SYSCALL_DEATH_TEST(symlinkat); |
| 533 RESTRICT_SYSCALL_DEATH_TEST(sync); |
| 534 #if defined(__i386__) || defined(__x86_64__) |
| 535 RESTRICT_SYSCALL_DEATH_TEST(sync_file_range); |
| 536 #endif |
| 537 #if defined(__arm__) |
| 538 RESTRICT_SYSCALL_DEATH_TEST(sync_file_range2); |
| 539 #endif |
| 540 RESTRICT_SYSCALL_DEATH_TEST(syncfs); |
| 541 RESTRICT_SYSCALL_DEATH_TEST(sysfs); |
| 542 RESTRICT_SYSCALL_DEATH_TEST(sysinfo); |
| 543 RESTRICT_SYSCALL_DEATH_TEST(syslog); |
| 544 RESTRICT_SYSCALL_DEATH_TEST(tee); |
| 545 RESTRICT_SYSCALL_DEATH_TEST(tgkill); |
| 546 RESTRICT_SYSCALL_DEATH_TEST(timer_create); |
| 547 RESTRICT_SYSCALL_DEATH_TEST(timer_delete); |
| 548 RESTRICT_SYSCALL_DEATH_TEST(timer_getoverrun); |
| 549 RESTRICT_SYSCALL_DEATH_TEST(timer_gettime); |
| 550 RESTRICT_SYSCALL_DEATH_TEST(timer_settime); |
| 551 RESTRICT_SYSCALL_DEATH_TEST(timerfd_create); |
| 552 RESTRICT_SYSCALL_DEATH_TEST(timerfd_gettime); |
| 553 RESTRICT_SYSCALL_DEATH_TEST(timerfd_settime); |
| 554 RESTRICT_SYSCALL_DEATH_TEST(tkill); |
| 555 RESTRICT_SYSCALL_DEATH_TEST(truncate); |
| 556 #if defined(__i386__) || defined(__arm__) |
| 557 RESTRICT_SYSCALL_DEATH_TEST(truncate64); |
| 558 #endif |
| 559 #if defined(__x86_64__) |
| 560 RESTRICT_SYSCALL_DEATH_TEST(tuxcall); |
| 561 #endif |
| 562 #if defined(__i386__) || defined(__arm__) |
| 563 RESTRICT_SYSCALL_DEATH_TEST(ugetrlimit); |
| 564 #endif |
| 565 #if defined(__i386__) |
| 566 RESTRICT_SYSCALL_DEATH_TEST(ulimit); |
| 567 #endif |
| 568 RESTRICT_SYSCALL_DEATH_TEST(umask); |
| 569 #if defined(__i386__) |
| 570 RESTRICT_SYSCALL_DEATH_TEST(umount); |
| 571 #endif |
| 572 RESTRICT_SYSCALL_DEATH_TEST(umount2); |
| 573 RESTRICT_SYSCALL_DEATH_TEST(uname); |
| 574 RESTRICT_SYSCALL_DEATH_TEST(unlink); |
| 575 RESTRICT_SYSCALL_DEATH_TEST(unlinkat); |
| 576 RESTRICT_SYSCALL_DEATH_TEST(unshare); |
| 577 RESTRICT_SYSCALL_DEATH_TEST(uselib); |
| 578 RESTRICT_SYSCALL_DEATH_TEST(ustat); |
| 579 #if defined(__i386__) || defined(__x86_64__) |
| 580 RESTRICT_SYSCALL_DEATH_TEST(utime); |
| 581 #endif |
| 582 RESTRICT_SYSCALL_DEATH_TEST(utimensat); |
| 583 RESTRICT_SYSCALL_DEATH_TEST(utimes); |
| 584 RESTRICT_SYSCALL_DEATH_TEST(vfork); |
| 585 RESTRICT_SYSCALL_DEATH_TEST(vhangup); |
| 586 #if defined(__i386__) |
| 587 RESTRICT_SYSCALL_DEATH_TEST(vm86); |
| 588 #endif |
| 589 #if defined(__i386__) |
| 590 RESTRICT_SYSCALL_DEATH_TEST(vm86old); |
| 591 #endif |
| 592 RESTRICT_SYSCALL_DEATH_TEST(vmsplice); |
| 593 RESTRICT_SYSCALL_DEATH_TEST(vserver); |
| 594 RESTRICT_SYSCALL_DEATH_TEST(wait4); |
| 595 RESTRICT_SYSCALL_DEATH_TEST(waitid); |
| 596 #if defined(__i386__) |
| 597 RESTRICT_SYSCALL_DEATH_TEST(waitpid); |
| 598 #endif |
| 599 RESTRICT_SYSCALL_DEATH_TEST(writev); |
| 600 |
| 601 // ARM specific syscalls. |
| 602 #if defined(__arm__) |
| 603 RESTRICT_ARM_SYSCALL_DEATH_TEST(breakpoint); |
| 604 RESTRICT_ARM_SYSCALL_DEATH_TEST(usr26); |
| 605 RESTRICT_ARM_SYSCALL_DEATH_TEST(usr32); |
| 606 RESTRICT_ARM_SYSCALL_DEATH_TEST(set_tls); |
| 607 #endif |
| 608 |
| 609 } // namespace |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 196793023:
Add seccomp sandbox for non-SFI NaCl (Closed)
Base URL: svn://svn.chromium.org/chrome/trunk/src