Chromium Code Reviews Chromium Code Reviews
Issue 196793023:
Add seccomp sandbox for non-SFI NaCl (Closed)
Base URL: svn://svn.chromium.org/chrome/trunk/src| OLD | NEW |
|---|---|
| (Empty) | |
| 1 // Copyright (c) 2014 The Chromium Authors. All rights reserved. | |
|
jln (very slow on Chromium)
2014/04/16 02:27:34
No (c) in new files, just "Copyright 2014"
hamaji
2014/04/16 17:24:16
Done.
| |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h" | |
| 6 | |
| 7 #include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h" | |
| 8 #include "sandbox/linux/seccomp-bpf/bpf_tests.h" | |
| 9 | |
| 10 namespace { | |
| 11 | |
| 12 // Test cases in this file just makes sure not-whitelisted syscalls | |
|
Mark Seaborn
2014/04/16 16:19:25
"make sure"
hamaji
2014/04/16 17:24:16
Done.
| |
| 13 // are appropriately disallowed. They should raise SIGSYS regardless | |
| 14 // of arguments. We always pass five zeros not to pass uninitialized | |
| 15 // values to syscalls. | |
| 16 #define RESTRICT_SYSCALL_DEATH_TEST_IMPL(name, sysno) \ | |
| 17 BPF_DEATH_TEST( \ | |
| 18 NaClNonSfiSandboxSIGSYSTest, name, \ | |
| 19 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), \ | |
| 20 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) { \ | |
| 21 syscall(sysno, 0, 0, 0, 0, 0); \ | |
| 22 } | |
| 23 | |
| 24 #define RESTRICT_SYSCALL_DEATH_TEST(name) \ | |
| 25 RESTRICT_SYSCALL_DEATH_TEST_IMPL(name, __NR_ ## name) | |
| 26 | |
| 27 #define RESTRICT_ARM_SYSCALL_DEATH_TEST(name) \ | |
| 28 RESTRICT_SYSCALL_DEATH_TEST_IMPL(ARM_ ## name, __ARM_NR_ ## name) | |
| 29 | |
| 30 #if defined(__i386__) || defined(__arm__) | |
| 31 RESTRICT_SYSCALL_DEATH_TEST(_newselect); | |
| 32 #endif | |
| 33 RESTRICT_SYSCALL_DEATH_TEST(_sysctl); | |
| 34 #if defined(__x86_64__) || defined(__arm__) | |
| 35 RESTRICT_SYSCALL_DEATH_TEST(accept); | |
| 36 #endif | |
| 37 #if defined(__x86_64__) || defined(__arm__) | |
| 38 RESTRICT_SYSCALL_DEATH_TEST(accept4); | |
| 39 #endif | |
| 40 RESTRICT_SYSCALL_DEATH_TEST(access); | |
| 41 RESTRICT_SYSCALL_DEATH_TEST(acct); | |
| 42 RESTRICT_SYSCALL_DEATH_TEST(add_key); | |
| 43 RESTRICT_SYSCALL_DEATH_TEST(adjtimex); | |
| 44 #if defined(__i386__) || defined(__x86_64__) | |
| 45 RESTRICT_SYSCALL_DEATH_TEST(afs_syscall); | |
| 46 #endif | |
| 47 #if defined(__i386__) || defined(__x86_64__) | |
| 48 RESTRICT_SYSCALL_DEATH_TEST(alarm); | |
| 49 #endif | |
| 50 #if defined(__x86_64__) | |
| 51 RESTRICT_SYSCALL_DEATH_TEST(arch_prctl); | |
| 52 #endif | |
| 53 #if defined(__arm__) | |
| 54 RESTRICT_SYSCALL_DEATH_TEST(arm_fadvise64_64); | |
| 55 #endif | |
| 56 #if defined(__i386__) || defined(__arm__) | |
| 57 RESTRICT_SYSCALL_DEATH_TEST(bdflush); | |
| 58 #endif | |
| 59 #if defined(__x86_64__) || defined(__arm__) | |
| 60 RESTRICT_SYSCALL_DEATH_TEST(bind); | |
| 61 #endif | |
| 62 #if defined(__i386__) | |
| 63 RESTRICT_SYSCALL_DEATH_TEST(break); | |
| 64 #endif | |
| 65 RESTRICT_SYSCALL_DEATH_TEST(capget); | |
| 66 RESTRICT_SYSCALL_DEATH_TEST(capset); | |
| 67 RESTRICT_SYSCALL_DEATH_TEST(chdir); | |
| 68 RESTRICT_SYSCALL_DEATH_TEST(chmod); | |
| 69 RESTRICT_SYSCALL_DEATH_TEST(chown); | |
| 70 #if defined(__i386__) || defined(__arm__) | |
| 71 RESTRICT_SYSCALL_DEATH_TEST(chown32); | |
| 72 #endif | |
| 73 RESTRICT_SYSCALL_DEATH_TEST(chroot); | |
| 74 RESTRICT_SYSCALL_DEATH_TEST(clock_adjtime); | |
| 75 RESTRICT_SYSCALL_DEATH_TEST(clock_nanosleep); | |
| 76 RESTRICT_SYSCALL_DEATH_TEST(clock_settime); | |
| 77 #if defined(__x86_64__) || defined(__arm__) | |
| 78 RESTRICT_SYSCALL_DEATH_TEST(connect); | |
| 79 #endif | |
| 80 RESTRICT_SYSCALL_DEATH_TEST(creat); | |
| 81 #if defined(__i386__) || defined(__x86_64__) | |
| 82 RESTRICT_SYSCALL_DEATH_TEST(create_module); | |
| 83 #endif | |
| 84 RESTRICT_SYSCALL_DEATH_TEST(delete_module); | |
| 85 RESTRICT_SYSCALL_DEATH_TEST(dup3); | |
| 86 RESTRICT_SYSCALL_DEATH_TEST(epoll_create1); | |
| 87 #if defined(__x86_64__) | |
| 88 RESTRICT_SYSCALL_DEATH_TEST(epoll_ctl_old); | |
| 89 #endif | |
| 90 RESTRICT_SYSCALL_DEATH_TEST(epoll_pwait); | |
| 91 #if defined(__x86_64__) | |
| 92 RESTRICT_SYSCALL_DEATH_TEST(epoll_wait_old); | |
| 93 #endif | |
| 94 RESTRICT_SYSCALL_DEATH_TEST(eventfd); | |
| 95 RESTRICT_SYSCALL_DEATH_TEST(eventfd2); | |
| 96 RESTRICT_SYSCALL_DEATH_TEST(execve); | |
| 97 RESTRICT_SYSCALL_DEATH_TEST(faccessat); | |
| 98 #if defined(__i386__) || defined(__x86_64__) | |
| 99 RESTRICT_SYSCALL_DEATH_TEST(fadvise64); | |
| 100 #endif | |
| 101 #if defined(__i386__) | |
| 102 RESTRICT_SYSCALL_DEATH_TEST(fadvise64_64); | |
| 103 #endif | |
| 104 RESTRICT_SYSCALL_DEATH_TEST(fallocate); | |
| 105 RESTRICT_SYSCALL_DEATH_TEST(fanotify_init); | |
| 106 RESTRICT_SYSCALL_DEATH_TEST(fanotify_mark); | |
| 107 RESTRICT_SYSCALL_DEATH_TEST(fchdir); | |
| 108 RESTRICT_SYSCALL_DEATH_TEST(fchmod); | |
| 109 RESTRICT_SYSCALL_DEATH_TEST(fchmodat); | |
| 110 RESTRICT_SYSCALL_DEATH_TEST(fchown); | |
| 111 #if defined(__i386__) || defined(__arm__) | |
| 112 RESTRICT_SYSCALL_DEATH_TEST(fchown32); | |
| 113 #endif | |
| 114 RESTRICT_SYSCALL_DEATH_TEST(fchownat); | |
| 115 #if defined(__i386__) || defined(__arm__) | |
| 116 RESTRICT_SYSCALL_DEATH_TEST(fcntl); | |
| 117 #endif | |
| 118 RESTRICT_SYSCALL_DEATH_TEST(fdatasync); | |
| 119 RESTRICT_SYSCALL_DEATH_TEST(fgetxattr); | |
| 120 RESTRICT_SYSCALL_DEATH_TEST(flistxattr); | |
| 121 RESTRICT_SYSCALL_DEATH_TEST(flock); | |
| 122 RESTRICT_SYSCALL_DEATH_TEST(fork); | |
| 123 RESTRICT_SYSCALL_DEATH_TEST(fremovexattr); | |
| 124 RESTRICT_SYSCALL_DEATH_TEST(fsetxattr); | |
| 125 #if defined(__i386__) || defined(__arm__) | |
| 126 RESTRICT_SYSCALL_DEATH_TEST(fstat); | |
| 127 #endif | |
| 128 #if defined(__i386__) || defined(__arm__) | |
| 129 RESTRICT_SYSCALL_DEATH_TEST(fstatat64); | |
| 130 #endif | |
| 131 RESTRICT_SYSCALL_DEATH_TEST(fstatfs); | |
| 132 #if defined(__i386__) || defined(__arm__) | |
| 133 RESTRICT_SYSCALL_DEATH_TEST(fstatfs64); | |
| 134 #endif | |
| 135 RESTRICT_SYSCALL_DEATH_TEST(fsync); | |
| 136 #if defined(__i386__) | |
| 137 RESTRICT_SYSCALL_DEATH_TEST(ftime); | |
| 138 #endif | |
| 139 RESTRICT_SYSCALL_DEATH_TEST(ftruncate); | |
| 140 #if defined(__i386__) || defined(__arm__) | |
| 141 RESTRICT_SYSCALL_DEATH_TEST(ftruncate64); | |
| 142 #endif | |
| 143 RESTRICT_SYSCALL_DEATH_TEST(futimesat); | |
| 144 #if defined(__i386__) || defined(__x86_64__) | |
| 145 RESTRICT_SYSCALL_DEATH_TEST(get_kernel_syms); | |
| 146 #endif | |
| 147 RESTRICT_SYSCALL_DEATH_TEST(get_mempolicy); | |
| 148 RESTRICT_SYSCALL_DEATH_TEST(get_robust_list); | |
| 149 #if defined(__i386__) || defined(__x86_64__) | |
| 150 RESTRICT_SYSCALL_DEATH_TEST(get_thread_area); | |
| 151 #endif | |
| 152 RESTRICT_SYSCALL_DEATH_TEST(getcpu); | |
| 153 RESTRICT_SYSCALL_DEATH_TEST(getcwd); | |
| 154 RESTRICT_SYSCALL_DEATH_TEST(getdents); | |
| 155 RESTRICT_SYSCALL_DEATH_TEST(getdents64); | |
| 156 RESTRICT_SYSCALL_DEATH_TEST(getgroups); | |
| 157 #if defined(__i386__) || defined(__arm__) | |
| 158 RESTRICT_SYSCALL_DEATH_TEST(getgroups32); | |
| 159 #endif | |
| 160 RESTRICT_SYSCALL_DEATH_TEST(getitimer); | |
| 161 #if defined(__x86_64__) || defined(__arm__) | |
| 162 RESTRICT_SYSCALL_DEATH_TEST(getpeername); | |
| 163 #endif | |
| 164 RESTRICT_SYSCALL_DEATH_TEST(getpgid); | |
| 165 RESTRICT_SYSCALL_DEATH_TEST(getpgrp); | |
| 166 RESTRICT_SYSCALL_DEATH_TEST(getpid); | |
| 167 #if defined(__i386__) || defined(__x86_64__) | |
| 168 RESTRICT_SYSCALL_DEATH_TEST(getpmsg); | |
| 169 #endif | |
| 170 RESTRICT_SYSCALL_DEATH_TEST(getppid); | |
| 171 RESTRICT_SYSCALL_DEATH_TEST(getpriority); | |
| 172 RESTRICT_SYSCALL_DEATH_TEST(getresgid); | |
| 173 #if defined(__i386__) || defined(__arm__) | |
| 174 RESTRICT_SYSCALL_DEATH_TEST(getresgid32); | |
| 175 #endif | |
| 176 RESTRICT_SYSCALL_DEATH_TEST(getresuid); | |
| 177 #if defined(__i386__) || defined(__arm__) | |
| 178 RESTRICT_SYSCALL_DEATH_TEST(getresuid32); | |
| 179 #endif | |
| 180 #if defined(__i386__) || defined(__x86_64__) | |
| 181 RESTRICT_SYSCALL_DEATH_TEST(getrlimit); | |
| 182 #endif | |
| 183 RESTRICT_SYSCALL_DEATH_TEST(getrusage); | |
| 184 RESTRICT_SYSCALL_DEATH_TEST(getsid); | |
| 185 #if defined(__x86_64__) || defined(__arm__) | |
| 186 RESTRICT_SYSCALL_DEATH_TEST(getsockname); | |
| 187 #endif | |
| 188 #if defined(__x86_64__) || defined(__arm__) | |
| 189 RESTRICT_SYSCALL_DEATH_TEST(getsockopt); | |
| 190 #endif | |
| 191 RESTRICT_SYSCALL_DEATH_TEST(getxattr); | |
| 192 #if defined(__i386__) | |
| 193 RESTRICT_SYSCALL_DEATH_TEST(gtty); | |
| 194 #endif | |
| 195 #if defined(__i386__) | |
| 196 RESTRICT_SYSCALL_DEATH_TEST(idle); | |
| 197 #endif | |
| 198 RESTRICT_SYSCALL_DEATH_TEST(init_module); | |
| 199 RESTRICT_SYSCALL_DEATH_TEST(inotify_add_watch); | |
| 200 RESTRICT_SYSCALL_DEATH_TEST(inotify_init); | |
| 201 RESTRICT_SYSCALL_DEATH_TEST(inotify_init1); | |
| 202 RESTRICT_SYSCALL_DEATH_TEST(inotify_rm_watch); | |
| 203 RESTRICT_SYSCALL_DEATH_TEST(io_cancel); | |
| 204 RESTRICT_SYSCALL_DEATH_TEST(io_destroy); | |
| 205 RESTRICT_SYSCALL_DEATH_TEST(io_getevents); | |
| 206 RESTRICT_SYSCALL_DEATH_TEST(io_setup); | |
| 207 RESTRICT_SYSCALL_DEATH_TEST(io_submit); | |
| 208 RESTRICT_SYSCALL_DEATH_TEST(ioctl); | |
| 209 #if defined(__i386__) || defined(__x86_64__) | |
| 210 RESTRICT_SYSCALL_DEATH_TEST(ioperm); | |
| 211 #endif | |
| 212 #if defined(__i386__) || defined(__x86_64__) | |
| 213 RESTRICT_SYSCALL_DEATH_TEST(iopl); | |
| 214 #endif | |
| 215 RESTRICT_SYSCALL_DEATH_TEST(ioprio_get); | |
| 216 RESTRICT_SYSCALL_DEATH_TEST(ioprio_set); | |
| 217 #if defined(__i386__) | |
| 218 RESTRICT_SYSCALL_DEATH_TEST(ipc); | |
| 219 #endif | |
| 220 RESTRICT_SYSCALL_DEATH_TEST(kexec_load); | |
| 221 RESTRICT_SYSCALL_DEATH_TEST(keyctl); | |
| 222 RESTRICT_SYSCALL_DEATH_TEST(kill); | |
| 223 RESTRICT_SYSCALL_DEATH_TEST(lchown); | |
| 224 #if defined(__i386__) || defined(__arm__) | |
| 225 RESTRICT_SYSCALL_DEATH_TEST(lchown32); | |
| 226 #endif | |
| 227 RESTRICT_SYSCALL_DEATH_TEST(lgetxattr); | |
| 228 RESTRICT_SYSCALL_DEATH_TEST(link); | |
| 229 RESTRICT_SYSCALL_DEATH_TEST(linkat); | |
| 230 #if defined(__x86_64__) || defined(__arm__) | |
| 231 RESTRICT_SYSCALL_DEATH_TEST(listen); | |
| 232 #endif | |
| 233 RESTRICT_SYSCALL_DEATH_TEST(listxattr); | |
| 234 RESTRICT_SYSCALL_DEATH_TEST(llistxattr); | |
| 235 #if defined(__i386__) | |
| 236 RESTRICT_SYSCALL_DEATH_TEST(lock); | |
| 237 #endif | |
| 238 RESTRICT_SYSCALL_DEATH_TEST(lookup_dcookie); | |
| 239 RESTRICT_SYSCALL_DEATH_TEST(lremovexattr); | |
| 240 #if defined(__i386__) || defined(__arm__) | |
| 241 RESTRICT_SYSCALL_DEATH_TEST(lseek); | |
| 242 #endif | |
| 243 RESTRICT_SYSCALL_DEATH_TEST(lsetxattr); | |
| 244 RESTRICT_SYSCALL_DEATH_TEST(lstat); | |
| 245 #if defined(__i386__) || defined(__arm__) | |
| 246 RESTRICT_SYSCALL_DEATH_TEST(lstat64); | |
| 247 #endif | |
| 248 RESTRICT_SYSCALL_DEATH_TEST(mbind); | |
| 249 #if defined(__i386__) || defined(__x86_64__) | |
| 250 RESTRICT_SYSCALL_DEATH_TEST(migrate_pages); | |
| 251 #endif | |
| 252 RESTRICT_SYSCALL_DEATH_TEST(mincore); | |
| 253 RESTRICT_SYSCALL_DEATH_TEST(mkdir); | |
| 254 RESTRICT_SYSCALL_DEATH_TEST(mkdirat); | |
| 255 RESTRICT_SYSCALL_DEATH_TEST(mknod); | |
| 256 RESTRICT_SYSCALL_DEATH_TEST(mknodat); | |
| 257 RESTRICT_SYSCALL_DEATH_TEST(mlock); | |
| 258 RESTRICT_SYSCALL_DEATH_TEST(mlockall); | |
| 259 #if defined(__i386__) | |
| 260 RESTRICT_SYSCALL_DEATH_TEST(mmap); | |
| 261 #endif | |
| 262 #if defined(__i386__) || defined(__x86_64__) | |
| 263 RESTRICT_SYSCALL_DEATH_TEST(modify_ldt); | |
| 264 #endif | |
| 265 RESTRICT_SYSCALL_DEATH_TEST(mount); | |
| 266 RESTRICT_SYSCALL_DEATH_TEST(move_pages); | |
| 267 #if defined(__i386__) | |
| 268 RESTRICT_SYSCALL_DEATH_TEST(mpx); | |
| 269 #endif | |
| 270 RESTRICT_SYSCALL_DEATH_TEST(mq_getsetattr); | |
| 271 RESTRICT_SYSCALL_DEATH_TEST(mq_notify); | |
| 272 RESTRICT_SYSCALL_DEATH_TEST(mq_open); | |
| 273 RESTRICT_SYSCALL_DEATH_TEST(mq_timedreceive); | |
| 274 RESTRICT_SYSCALL_DEATH_TEST(mq_timedsend); | |
| 275 RESTRICT_SYSCALL_DEATH_TEST(mq_unlink); | |
| 276 RESTRICT_SYSCALL_DEATH_TEST(mremap); | |
| 277 #if defined(__x86_64__) || defined(__arm__) | |
| 278 RESTRICT_SYSCALL_DEATH_TEST(msgctl); | |
| 279 #endif | |
| 280 #if defined(__x86_64__) || defined(__arm__) | |
| 281 RESTRICT_SYSCALL_DEATH_TEST(msgget); | |
| 282 #endif | |
| 283 #if defined(__x86_64__) || defined(__arm__) | |
| 284 RESTRICT_SYSCALL_DEATH_TEST(msgrcv); | |
| 285 #endif | |
| 286 #if defined(__x86_64__) || defined(__arm__) | |
| 287 RESTRICT_SYSCALL_DEATH_TEST(msgsnd); | |
| 288 #endif | |
| 289 RESTRICT_SYSCALL_DEATH_TEST(msync); | |
| 290 RESTRICT_SYSCALL_DEATH_TEST(munlock); | |
| 291 RESTRICT_SYSCALL_DEATH_TEST(munlockall); | |
| 292 RESTRICT_SYSCALL_DEATH_TEST(name_to_handle_at); | |
| 293 #if defined(__x86_64__) | |
| 294 RESTRICT_SYSCALL_DEATH_TEST(newfstatat); | |
| 295 #endif | |
| 296 RESTRICT_SYSCALL_DEATH_TEST(nfsservctl); | |
| 297 #if defined(__i386__) || defined(__arm__) | |
| 298 RESTRICT_SYSCALL_DEATH_TEST(nice); | |
| 299 #endif | |
| 300 #if defined(__i386__) | |
| 301 RESTRICT_SYSCALL_DEATH_TEST(oldfstat); | |
| 302 #endif | |
| 303 #if defined(__i386__) | |
| 304 RESTRICT_SYSCALL_DEATH_TEST(oldlstat); | |
| 305 #endif | |
| 306 #if defined(__i386__) | |
| 307 RESTRICT_SYSCALL_DEATH_TEST(oldolduname); | |
| 308 #endif | |
| 309 #if defined(__i386__) | |
| 310 RESTRICT_SYSCALL_DEATH_TEST(oldstat); | |
| 311 #endif | |
| 312 #if defined(__i386__) | |
| 313 RESTRICT_SYSCALL_DEATH_TEST(olduname); | |
| 314 #endif | |
| 315 RESTRICT_SYSCALL_DEATH_TEST(open_by_handle_at); | |
| 316 RESTRICT_SYSCALL_DEATH_TEST(openat); | |
| 317 RESTRICT_SYSCALL_DEATH_TEST(pause); | |
| 318 #if defined(__arm__) | |
| 319 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_iobase); | |
| 320 #endif | |
| 321 #if defined(__arm__) | |
| 322 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_read); | |
| 323 #endif | |
| 324 #if defined(__arm__) | |
| 325 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_write); | |
| 326 #endif | |
| 327 RESTRICT_SYSCALL_DEATH_TEST(perf_event_open); | |
| 328 RESTRICT_SYSCALL_DEATH_TEST(personality); | |
| 329 RESTRICT_SYSCALL_DEATH_TEST(pipe2); | |
| 330 RESTRICT_SYSCALL_DEATH_TEST(pivot_root); | |
| 331 RESTRICT_SYSCALL_DEATH_TEST(poll); | |
| 332 RESTRICT_SYSCALL_DEATH_TEST(ppoll); | |
| 333 RESTRICT_SYSCALL_DEATH_TEST(preadv); | |
| 334 RESTRICT_SYSCALL_DEATH_TEST(prlimit64); | |
| 335 RESTRICT_SYSCALL_DEATH_TEST(process_vm_readv); | |
| 336 RESTRICT_SYSCALL_DEATH_TEST(process_vm_writev); | |
| 337 #if defined(__i386__) | |
| 338 RESTRICT_SYSCALL_DEATH_TEST(prof); | |
| 339 #endif | |
| 340 #if defined(__i386__) | |
| 341 RESTRICT_SYSCALL_DEATH_TEST(profil); | |
| 342 #endif | |
| 343 RESTRICT_SYSCALL_DEATH_TEST(pselect6); | |
| 344 #if defined(__i386__) || defined(__x86_64__) | |
| 345 RESTRICT_SYSCALL_DEATH_TEST(putpmsg); | |
| 346 #endif | |
| 347 RESTRICT_SYSCALL_DEATH_TEST(pwritev); | |
| 348 #if defined(__i386__) || defined(__x86_64__) | |
| 349 RESTRICT_SYSCALL_DEATH_TEST(query_module); | |
| 350 #endif | |
| 351 RESTRICT_SYSCALL_DEATH_TEST(quotactl); | |
| 352 RESTRICT_SYSCALL_DEATH_TEST(readahead); | |
| 353 #if defined(__i386__) | |
| 354 RESTRICT_SYSCALL_DEATH_TEST(readdir); | |
| 355 #endif | |
| 356 RESTRICT_SYSCALL_DEATH_TEST(readlink); | |
| 357 RESTRICT_SYSCALL_DEATH_TEST(readlinkat); | |
| 358 RESTRICT_SYSCALL_DEATH_TEST(readv); | |
| 359 RESTRICT_SYSCALL_DEATH_TEST(reboot); | |
| 360 #if defined(__arm__) | |
| 361 RESTRICT_SYSCALL_DEATH_TEST(recv); | |
| 362 #endif | |
| 363 #if defined(__x86_64__) || defined(__arm__) | |
| 364 RESTRICT_SYSCALL_DEATH_TEST(recvfrom); | |
| 365 #endif | |
| 366 RESTRICT_SYSCALL_DEATH_TEST(recvmmsg); | |
| 367 RESTRICT_SYSCALL_DEATH_TEST(remap_file_pages); | |
| 368 RESTRICT_SYSCALL_DEATH_TEST(removexattr); | |
| 369 RESTRICT_SYSCALL_DEATH_TEST(rename); | |
| 370 RESTRICT_SYSCALL_DEATH_TEST(renameat); | |
| 371 RESTRICT_SYSCALL_DEATH_TEST(request_key); | |
| 372 RESTRICT_SYSCALL_DEATH_TEST(rmdir); | |
| 373 RESTRICT_SYSCALL_DEATH_TEST(rt_sigaction); | |
| 374 RESTRICT_SYSCALL_DEATH_TEST(rt_sigpending); | |
| 375 RESTRICT_SYSCALL_DEATH_TEST(rt_sigprocmask); | |
| 376 RESTRICT_SYSCALL_DEATH_TEST(rt_sigqueueinfo); | |
| 377 RESTRICT_SYSCALL_DEATH_TEST(rt_sigreturn); | |
| 378 RESTRICT_SYSCALL_DEATH_TEST(rt_sigsuspend); | |
| 379 RESTRICT_SYSCALL_DEATH_TEST(rt_sigtimedwait); | |
| 380 RESTRICT_SYSCALL_DEATH_TEST(rt_tgsigqueueinfo); | |
| 381 RESTRICT_SYSCALL_DEATH_TEST(sched_get_priority_max); | |
| 382 RESTRICT_SYSCALL_DEATH_TEST(sched_get_priority_min); | |
| 383 RESTRICT_SYSCALL_DEATH_TEST(sched_getaffinity); | |
| 384 RESTRICT_SYSCALL_DEATH_TEST(sched_getparam); | |
| 385 RESTRICT_SYSCALL_DEATH_TEST(sched_getscheduler); | |
| 386 RESTRICT_SYSCALL_DEATH_TEST(sched_rr_get_interval); | |
| 387 RESTRICT_SYSCALL_DEATH_TEST(sched_setaffinity); | |
| 388 RESTRICT_SYSCALL_DEATH_TEST(sched_setparam); | |
| 389 RESTRICT_SYSCALL_DEATH_TEST(sched_setscheduler); | |
| 390 #if defined(__x86_64__) | |
| 391 RESTRICT_SYSCALL_DEATH_TEST(security); | |
| 392 #endif | |
| 393 #if defined(__i386__) || defined(__x86_64__) | |
| 394 RESTRICT_SYSCALL_DEATH_TEST(select); | |
| 395 #endif | |
| 396 #if defined(__x86_64__) || defined(__arm__) | |
| 397 RESTRICT_SYSCALL_DEATH_TEST(semctl); | |
| 398 #endif | |
| 399 #if defined(__x86_64__) || defined(__arm__) | |
| 400 RESTRICT_SYSCALL_DEATH_TEST(semget); | |
| 401 #endif | |
| 402 #if defined(__x86_64__) || defined(__arm__) | |
| 403 RESTRICT_SYSCALL_DEATH_TEST(semop); | |
| 404 #endif | |
| 405 #if defined(__x86_64__) || defined(__arm__) | |
| 406 RESTRICT_SYSCALL_DEATH_TEST(semtimedop); | |
| 407 #endif | |
| 408 #if defined(__arm__) | |
| 409 RESTRICT_SYSCALL_DEATH_TEST(send); | |
| 410 #endif | |
| 411 RESTRICT_SYSCALL_DEATH_TEST(sendfile); | |
| 412 #if defined(__i386__) || defined(__arm__) | |
| 413 RESTRICT_SYSCALL_DEATH_TEST(sendfile64); | |
| 414 #endif | |
| 415 RESTRICT_SYSCALL_DEATH_TEST(sendmmsg); | |
| 416 #if defined(__x86_64__) || defined(__arm__) | |
| 417 RESTRICT_SYSCALL_DEATH_TEST(sendto); | |
| 418 #endif | |
| 419 RESTRICT_SYSCALL_DEATH_TEST(set_mempolicy); | |
| 420 #if defined(__i386__) || defined(__x86_64__) | |
| 421 RESTRICT_SYSCALL_DEATH_TEST(set_thread_area); | |
| 422 #endif | |
| 423 RESTRICT_SYSCALL_DEATH_TEST(set_tid_address); | |
| 424 RESTRICT_SYSCALL_DEATH_TEST(setdomainname); | |
| 425 RESTRICT_SYSCALL_DEATH_TEST(setfsgid); | |
| 426 #if defined(__i386__) || defined(__arm__) | |
| 427 RESTRICT_SYSCALL_DEATH_TEST(setfsgid32); | |
| 428 #endif | |
| 429 RESTRICT_SYSCALL_DEATH_TEST(setfsuid); | |
| 430 #if defined(__i386__) || defined(__arm__) | |
| 431 RESTRICT_SYSCALL_DEATH_TEST(setfsuid32); | |
| 432 #endif | |
| 433 RESTRICT_SYSCALL_DEATH_TEST(setgid); | |
| 434 #if defined(__i386__) || defined(__arm__) | |
| 435 RESTRICT_SYSCALL_DEATH_TEST(setgid32); | |
| 436 #endif | |
| 437 RESTRICT_SYSCALL_DEATH_TEST(setgroups); | |
| 438 #if defined(__i386__) || defined(__arm__) | |
| 439 RESTRICT_SYSCALL_DEATH_TEST(setgroups32); | |
| 440 #endif | |
| 441 RESTRICT_SYSCALL_DEATH_TEST(sethostname); | |
| 442 RESTRICT_SYSCALL_DEATH_TEST(setitimer); | |
| 443 RESTRICT_SYSCALL_DEATH_TEST(setns); | |
| 444 RESTRICT_SYSCALL_DEATH_TEST(setpgid); | |
| 445 RESTRICT_SYSCALL_DEATH_TEST(setpriority); | |
| 446 RESTRICT_SYSCALL_DEATH_TEST(setregid); | |
| 447 #if defined(__i386__) || defined(__arm__) | |
| 448 RESTRICT_SYSCALL_DEATH_TEST(setregid32); | |
| 449 #endif | |
| 450 RESTRICT_SYSCALL_DEATH_TEST(setresgid); | |
| 451 #if defined(__i386__) || defined(__arm__) | |
| 452 RESTRICT_SYSCALL_DEATH_TEST(setresgid32); | |
| 453 #endif | |
| 454 RESTRICT_SYSCALL_DEATH_TEST(setresuid); | |
| 455 #if defined(__i386__) || defined(__arm__) | |
| 456 RESTRICT_SYSCALL_DEATH_TEST(setresuid32); | |
| 457 #endif | |
| 458 RESTRICT_SYSCALL_DEATH_TEST(setreuid); | |
| 459 #if defined(__i386__) || defined(__arm__) | |
| 460 RESTRICT_SYSCALL_DEATH_TEST(setreuid32); | |
| 461 #endif | |
| 462 RESTRICT_SYSCALL_DEATH_TEST(setrlimit); | |
| 463 RESTRICT_SYSCALL_DEATH_TEST(setsid); | |
| 464 #if defined(__x86_64__) || defined(__arm__) | |
| 465 RESTRICT_SYSCALL_DEATH_TEST(setsockopt); | |
| 466 #endif | |
| 467 RESTRICT_SYSCALL_DEATH_TEST(settimeofday); | |
| 468 RESTRICT_SYSCALL_DEATH_TEST(setuid); | |
| 469 #if defined(__i386__) || defined(__arm__) | |
| 470 RESTRICT_SYSCALL_DEATH_TEST(setuid32); | |
| 471 #endif | |
| 472 RESTRICT_SYSCALL_DEATH_TEST(setxattr); | |
| 473 #if defined(__i386__) | |
| 474 RESTRICT_SYSCALL_DEATH_TEST(sgetmask); | |
| 475 #endif | |
| 476 #if defined(__x86_64__) || defined(__arm__) | |
| 477 RESTRICT_SYSCALL_DEATH_TEST(shmat); | |
| 478 #endif | |
| 479 #if defined(__x86_64__) || defined(__arm__) | |
| 480 RESTRICT_SYSCALL_DEATH_TEST(shmctl); | |
| 481 #endif | |
| 482 #if defined(__x86_64__) || defined(__arm__) | |
| 483 RESTRICT_SYSCALL_DEATH_TEST(shmdt); | |
| 484 #endif | |
| 485 #if defined(__x86_64__) || defined(__arm__) | |
| 486 RESTRICT_SYSCALL_DEATH_TEST(shmget); | |
| 487 #endif | |
| 488 #if defined(__i386__) || defined(__arm__) | |
| 489 RESTRICT_SYSCALL_DEATH_TEST(sigaction); | |
| 490 #endif | |
| 491 #if defined(__i386__) | |
| 492 RESTRICT_SYSCALL_DEATH_TEST(signal); | |
| 493 #endif | |
| 494 RESTRICT_SYSCALL_DEATH_TEST(signalfd); | |
| 495 RESTRICT_SYSCALL_DEATH_TEST(signalfd4); | |
| 496 #if defined(__i386__) || defined(__arm__) | |
| 497 RESTRICT_SYSCALL_DEATH_TEST(sigpending); | |
| 498 #endif | |
| 499 #if defined(__i386__) || defined(__arm__) | |
| 500 RESTRICT_SYSCALL_DEATH_TEST(sigprocmask); | |
| 501 #endif | |
| 502 #if defined(__i386__) || defined(__arm__) | |
| 503 RESTRICT_SYSCALL_DEATH_TEST(sigreturn); | |
| 504 #endif | |
| 505 #if defined(__i386__) || defined(__arm__) | |
| 506 RESTRICT_SYSCALL_DEATH_TEST(sigsuspend); | |
| 507 #endif | |
| 508 #if defined(__x86_64__) || defined(__arm__) | |
| 509 RESTRICT_SYSCALL_DEATH_TEST(socket); | |
| 510 #endif | |
| 511 RESTRICT_SYSCALL_DEATH_TEST(splice); | |
| 512 #if defined(__i386__) | |
| 513 RESTRICT_SYSCALL_DEATH_TEST(ssetmask); | |
| 514 #endif | |
| 515 RESTRICT_SYSCALL_DEATH_TEST(stat); | |
| 516 #if defined(__i386__) || defined(__arm__) | |
| 517 RESTRICT_SYSCALL_DEATH_TEST(stat64); | |
| 518 #endif | |
| 519 RESTRICT_SYSCALL_DEATH_TEST(statfs); | |
| 520 #if defined(__i386__) || defined(__arm__) | |
| 521 RESTRICT_SYSCALL_DEATH_TEST(statfs64); | |
| 522 #endif | |
| 523 #if defined(__i386__) | |
| 524 RESTRICT_SYSCALL_DEATH_TEST(stime); | |
| 525 #endif | |
| 526 #if defined(__i386__) | |
| 527 RESTRICT_SYSCALL_DEATH_TEST(stty); | |
| 528 #endif | |
| 529 RESTRICT_SYSCALL_DEATH_TEST(swapoff); | |
| 530 RESTRICT_SYSCALL_DEATH_TEST(swapon); | |
| 531 RESTRICT_SYSCALL_DEATH_TEST(symlink); | |
| 532 RESTRICT_SYSCALL_DEATH_TEST(symlinkat); | |
| 533 RESTRICT_SYSCALL_DEATH_TEST(sync); | |
| 534 #if defined(__i386__) || defined(__x86_64__) | |
| 535 RESTRICT_SYSCALL_DEATH_TEST(sync_file_range); | |
| 536 #endif | |
| 537 #if defined(__arm__) | |
| 538 RESTRICT_SYSCALL_DEATH_TEST(sync_file_range2); | |
| 539 #endif | |
| 540 RESTRICT_SYSCALL_DEATH_TEST(syncfs); | |
| 541 RESTRICT_SYSCALL_DEATH_TEST(sysfs); | |
| 542 RESTRICT_SYSCALL_DEATH_TEST(sysinfo); | |
| 543 RESTRICT_SYSCALL_DEATH_TEST(syslog); | |
| 544 RESTRICT_SYSCALL_DEATH_TEST(tee); | |
| 545 RESTRICT_SYSCALL_DEATH_TEST(tgkill); | |
| 546 RESTRICT_SYSCALL_DEATH_TEST(timer_create); | |
| 547 RESTRICT_SYSCALL_DEATH_TEST(timer_delete); | |
| 548 RESTRICT_SYSCALL_DEATH_TEST(timer_getoverrun); | |
| 549 RESTRICT_SYSCALL_DEATH_TEST(timer_gettime); | |
| 550 RESTRICT_SYSCALL_DEATH_TEST(timer_settime); | |
| 551 RESTRICT_SYSCALL_DEATH_TEST(timerfd_create); | |
| 552 RESTRICT_SYSCALL_DEATH_TEST(timerfd_gettime); | |
| 553 RESTRICT_SYSCALL_DEATH_TEST(timerfd_settime); | |
| 554 RESTRICT_SYSCALL_DEATH_TEST(tkill); | |
| 555 RESTRICT_SYSCALL_DEATH_TEST(truncate); | |
| 556 #if defined(__i386__) || defined(__arm__) | |
| 557 RESTRICT_SYSCALL_DEATH_TEST(truncate64); | |
| 558 #endif | |
| 559 #if defined(__x86_64__) | |
| 560 RESTRICT_SYSCALL_DEATH_TEST(tuxcall); | |
| 561 #endif | |
| 562 #if defined(__i386__) || defined(__arm__) | |
| 563 RESTRICT_SYSCALL_DEATH_TEST(ugetrlimit); | |
| 564 #endif | |
| 565 #if defined(__i386__) | |
| 566 RESTRICT_SYSCALL_DEATH_TEST(ulimit); | |
| 567 #endif | |
| 568 RESTRICT_SYSCALL_DEATH_TEST(umask); | |
| 569 #if defined(__i386__) | |
| 570 RESTRICT_SYSCALL_DEATH_TEST(umount); | |
| 571 #endif | |
| 572 RESTRICT_SYSCALL_DEATH_TEST(umount2); | |
| 573 RESTRICT_SYSCALL_DEATH_TEST(uname); | |
| 574 RESTRICT_SYSCALL_DEATH_TEST(unlink); | |
| 575 RESTRICT_SYSCALL_DEATH_TEST(unlinkat); | |
| 576 RESTRICT_SYSCALL_DEATH_TEST(unshare); | |
| 577 RESTRICT_SYSCALL_DEATH_TEST(uselib); | |
| 578 RESTRICT_SYSCALL_DEATH_TEST(ustat); | |
| 579 #if defined(__i386__) || defined(__x86_64__) | |
| 580 RESTRICT_SYSCALL_DEATH_TEST(utime); | |
| 581 #endif | |
| 582 RESTRICT_SYSCALL_DEATH_TEST(utimensat); | |
| 583 RESTRICT_SYSCALL_DEATH_TEST(utimes); | |
| 584 RESTRICT_SYSCALL_DEATH_TEST(vfork); | |
| 585 RESTRICT_SYSCALL_DEATH_TEST(vhangup); | |
| 586 #if defined(__i386__) | |
| 587 RESTRICT_SYSCALL_DEATH_TEST(vm86); | |
| 588 #endif | |
| 589 #if defined(__i386__) | |
| 590 RESTRICT_SYSCALL_DEATH_TEST(vm86old); | |
| 591 #endif | |
| 592 RESTRICT_SYSCALL_DEATH_TEST(vmsplice); | |
| 593 RESTRICT_SYSCALL_DEATH_TEST(vserver); | |
| 594 RESTRICT_SYSCALL_DEATH_TEST(wait4); | |
| 595 RESTRICT_SYSCALL_DEATH_TEST(waitid); | |
| 596 #if defined(__i386__) | |
| 597 RESTRICT_SYSCALL_DEATH_TEST(waitpid); | |
| 598 #endif | |
| 599 RESTRICT_SYSCALL_DEATH_TEST(writev); | |
| 600 | |
| 601 // ARM specific syscalls. | |
| 602 #if defined(__arm__) | |
| 603 RESTRICT_ARM_SYSCALL_DEATH_TEST(breakpoint); | |
| 604 RESTRICT_ARM_SYSCALL_DEATH_TEST(usr26); | |
| 605 RESTRICT_ARM_SYSCALL_DEATH_TEST(usr32); | |
| 606 RESTRICT_ARM_SYSCALL_DEATH_TEST(set_tls); | |
| 607 #endif | |
| 608 | |
| 609 } // namespace | |
| OLD | NEW |
