| OLD | NEW |
|---|
| (Empty) | |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h" |
| 6 |
| 7 #include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h" |
| 8 #include "sandbox/linux/seccomp-bpf/bpf_tests.h" |
| 9 |
| 10 namespace { |
| 11 |
| 12 // Test cases in this file just make sure not-whitelisted syscalls |
| 13 // are appropriately disallowed. They should raise SIGSYS regardless |
| 14 // of arguments. We always pass five zeros not to pass uninitialized |
| 15 // values to syscalls. |
| 16 #define RESTRICT_SYSCALL_DEATH_TEST_IMPL(name, sysno) \ |
| 17 BPF_DEATH_TEST( \ |
| 18 NaClNonSfiSandboxSIGSYSTest, name, \ |
| 19 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), \ |
| 20 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy::EvaluateSyscallImpl) { \ |
| 21 syscall(sysno, 0, 0, 0, 0, 0); \ |
| 22 } |
| 23 |
| 24 #define RESTRICT_SYSCALL_DEATH_TEST(name) \ |
| 25 RESTRICT_SYSCALL_DEATH_TEST_IMPL(name, __NR_ ## name) |
| 26 |
| 27 #define RESTRICT_ARM_SYSCALL_DEATH_TEST(name) \ |
| 28 RESTRICT_SYSCALL_DEATH_TEST_IMPL(ARM_ ## name, __ARM_NR_ ## name) |
| 29 |
| 30 // They need to be allowed on ASan. |
| 31 #if !defined(ADDRESS_SANITIZER) |
| 32 RESTRICT_SYSCALL_DEATH_TEST(getpid); |
| 33 RESTRICT_SYSCALL_DEATH_TEST(ioctl); |
| 34 RESTRICT_SYSCALL_DEATH_TEST(readlink); |
| 35 #endif |
| 36 |
| 37 #if defined(__i386__) || defined(__arm__) |
| 38 RESTRICT_SYSCALL_DEATH_TEST(_newselect); |
| 39 #endif |
| 40 RESTRICT_SYSCALL_DEATH_TEST(_sysctl); |
| 41 #if defined(__x86_64__) || defined(__arm__) |
| 42 RESTRICT_SYSCALL_DEATH_TEST(accept); |
| 43 #endif |
| 44 #if defined(__x86_64__) || defined(__arm__) |
| 45 RESTRICT_SYSCALL_DEATH_TEST(accept4); |
| 46 #endif |
| 47 RESTRICT_SYSCALL_DEATH_TEST(access); |
| 48 RESTRICT_SYSCALL_DEATH_TEST(acct); |
| 49 RESTRICT_SYSCALL_DEATH_TEST(add_key); |
| 50 RESTRICT_SYSCALL_DEATH_TEST(adjtimex); |
| 51 #if defined(__i386__) || defined(__x86_64__) |
| 52 RESTRICT_SYSCALL_DEATH_TEST(afs_syscall); |
| 53 #endif |
| 54 #if defined(__i386__) || defined(__x86_64__) |
| 55 RESTRICT_SYSCALL_DEATH_TEST(alarm); |
| 56 #endif |
| 57 #if defined(__x86_64__) |
| 58 RESTRICT_SYSCALL_DEATH_TEST(arch_prctl); |
| 59 #endif |
| 60 #if defined(__arm__) |
| 61 RESTRICT_SYSCALL_DEATH_TEST(arm_fadvise64_64); |
| 62 #endif |
| 63 #if defined(__i386__) || defined(__arm__) |
| 64 RESTRICT_SYSCALL_DEATH_TEST(bdflush); |
| 65 #endif |
| 66 #if defined(__x86_64__) || defined(__arm__) |
| 67 RESTRICT_SYSCALL_DEATH_TEST(bind); |
| 68 #endif |
| 69 #if defined(__i386__) |
| 70 RESTRICT_SYSCALL_DEATH_TEST(break); |
| 71 #endif |
| 72 RESTRICT_SYSCALL_DEATH_TEST(capget); |
| 73 RESTRICT_SYSCALL_DEATH_TEST(capset); |
| 74 RESTRICT_SYSCALL_DEATH_TEST(chdir); |
| 75 RESTRICT_SYSCALL_DEATH_TEST(chmod); |
| 76 RESTRICT_SYSCALL_DEATH_TEST(chown); |
| 77 #if defined(__i386__) || defined(__arm__) |
| 78 RESTRICT_SYSCALL_DEATH_TEST(chown32); |
| 79 #endif |
| 80 RESTRICT_SYSCALL_DEATH_TEST(chroot); |
| 81 RESTRICT_SYSCALL_DEATH_TEST(clock_adjtime); |
| 82 RESTRICT_SYSCALL_DEATH_TEST(clock_nanosleep); |
| 83 RESTRICT_SYSCALL_DEATH_TEST(clock_settime); |
| 84 #if defined(__x86_64__) || defined(__arm__) |
| 85 RESTRICT_SYSCALL_DEATH_TEST(connect); |
| 86 #endif |
| 87 RESTRICT_SYSCALL_DEATH_TEST(creat); |
| 88 #if defined(__i386__) || defined(__x86_64__) |
| 89 RESTRICT_SYSCALL_DEATH_TEST(create_module); |
| 90 #endif |
| 91 RESTRICT_SYSCALL_DEATH_TEST(delete_module); |
| 92 RESTRICT_SYSCALL_DEATH_TEST(dup3); |
| 93 RESTRICT_SYSCALL_DEATH_TEST(epoll_create1); |
| 94 #if defined(__x86_64__) |
| 95 RESTRICT_SYSCALL_DEATH_TEST(epoll_ctl_old); |
| 96 #endif |
| 97 RESTRICT_SYSCALL_DEATH_TEST(epoll_pwait); |
| 98 #if defined(__x86_64__) |
| 99 RESTRICT_SYSCALL_DEATH_TEST(epoll_wait_old); |
| 100 #endif |
| 101 RESTRICT_SYSCALL_DEATH_TEST(eventfd); |
| 102 RESTRICT_SYSCALL_DEATH_TEST(eventfd2); |
| 103 RESTRICT_SYSCALL_DEATH_TEST(execve); |
| 104 RESTRICT_SYSCALL_DEATH_TEST(faccessat); |
| 105 #if defined(__i386__) || defined(__x86_64__) |
| 106 RESTRICT_SYSCALL_DEATH_TEST(fadvise64); |
| 107 #endif |
| 108 #if defined(__i386__) |
| 109 RESTRICT_SYSCALL_DEATH_TEST(fadvise64_64); |
| 110 #endif |
| 111 RESTRICT_SYSCALL_DEATH_TEST(fallocate); |
| 112 RESTRICT_SYSCALL_DEATH_TEST(fanotify_init); |
| 113 RESTRICT_SYSCALL_DEATH_TEST(fanotify_mark); |
| 114 RESTRICT_SYSCALL_DEATH_TEST(fchdir); |
| 115 RESTRICT_SYSCALL_DEATH_TEST(fchmod); |
| 116 RESTRICT_SYSCALL_DEATH_TEST(fchmodat); |
| 117 RESTRICT_SYSCALL_DEATH_TEST(fchown); |
| 118 #if defined(__i386__) || defined(__arm__) |
| 119 RESTRICT_SYSCALL_DEATH_TEST(fchown32); |
| 120 #endif |
| 121 RESTRICT_SYSCALL_DEATH_TEST(fchownat); |
| 122 #if defined(__i386__) || defined(__arm__) |
| 123 RESTRICT_SYSCALL_DEATH_TEST(fcntl); |
| 124 #endif |
| 125 RESTRICT_SYSCALL_DEATH_TEST(fdatasync); |
| 126 RESTRICT_SYSCALL_DEATH_TEST(fgetxattr); |
| 127 RESTRICT_SYSCALL_DEATH_TEST(flistxattr); |
| 128 RESTRICT_SYSCALL_DEATH_TEST(flock); |
| 129 RESTRICT_SYSCALL_DEATH_TEST(fork); |
| 130 RESTRICT_SYSCALL_DEATH_TEST(fremovexattr); |
| 131 RESTRICT_SYSCALL_DEATH_TEST(fsetxattr); |
| 132 #if defined(__i386__) || defined(__arm__) |
| 133 RESTRICT_SYSCALL_DEATH_TEST(fstat); |
| 134 #endif |
| 135 #if defined(__i386__) || defined(__arm__) |
| 136 RESTRICT_SYSCALL_DEATH_TEST(fstatat64); |
| 137 #endif |
| 138 RESTRICT_SYSCALL_DEATH_TEST(fstatfs); |
| 139 #if defined(__i386__) || defined(__arm__) |
| 140 RESTRICT_SYSCALL_DEATH_TEST(fstatfs64); |
| 141 #endif |
| 142 RESTRICT_SYSCALL_DEATH_TEST(fsync); |
| 143 #if defined(__i386__) |
| 144 RESTRICT_SYSCALL_DEATH_TEST(ftime); |
| 145 #endif |
| 146 RESTRICT_SYSCALL_DEATH_TEST(ftruncate); |
| 147 #if defined(__i386__) || defined(__arm__) |
| 148 RESTRICT_SYSCALL_DEATH_TEST(ftruncate64); |
| 149 #endif |
| 150 RESTRICT_SYSCALL_DEATH_TEST(futimesat); |
| 151 #if defined(__i386__) || defined(__x86_64__) |
| 152 RESTRICT_SYSCALL_DEATH_TEST(get_kernel_syms); |
| 153 #endif |
| 154 RESTRICT_SYSCALL_DEATH_TEST(get_mempolicy); |
| 155 RESTRICT_SYSCALL_DEATH_TEST(get_robust_list); |
| 156 #if defined(__i386__) || defined(__x86_64__) |
| 157 RESTRICT_SYSCALL_DEATH_TEST(get_thread_area); |
| 158 #endif |
| 159 RESTRICT_SYSCALL_DEATH_TEST(getcpu); |
| 160 RESTRICT_SYSCALL_DEATH_TEST(getcwd); |
| 161 RESTRICT_SYSCALL_DEATH_TEST(getdents); |
| 162 RESTRICT_SYSCALL_DEATH_TEST(getdents64); |
| 163 RESTRICT_SYSCALL_DEATH_TEST(getgroups); |
| 164 #if defined(__i386__) || defined(__arm__) |
| 165 RESTRICT_SYSCALL_DEATH_TEST(getgroups32); |
| 166 #endif |
| 167 RESTRICT_SYSCALL_DEATH_TEST(getitimer); |
| 168 #if defined(__x86_64__) || defined(__arm__) |
| 169 RESTRICT_SYSCALL_DEATH_TEST(getpeername); |
| 170 #endif |
| 171 RESTRICT_SYSCALL_DEATH_TEST(getpgid); |
| 172 RESTRICT_SYSCALL_DEATH_TEST(getpgrp); |
| 173 #if defined(__i386__) || defined(__x86_64__) |
| 174 RESTRICT_SYSCALL_DEATH_TEST(getpmsg); |
| 175 #endif |
| 176 RESTRICT_SYSCALL_DEATH_TEST(getppid); |
| 177 RESTRICT_SYSCALL_DEATH_TEST(getpriority); |
| 178 RESTRICT_SYSCALL_DEATH_TEST(getresgid); |
| 179 #if defined(__i386__) || defined(__arm__) |
| 180 RESTRICT_SYSCALL_DEATH_TEST(getresgid32); |
| 181 #endif |
| 182 RESTRICT_SYSCALL_DEATH_TEST(getresuid); |
| 183 #if defined(__i386__) || defined(__arm__) |
| 184 RESTRICT_SYSCALL_DEATH_TEST(getresuid32); |
| 185 #endif |
| 186 #if defined(__i386__) || defined(__x86_64__) |
| 187 RESTRICT_SYSCALL_DEATH_TEST(getrlimit); |
| 188 #endif |
| 189 RESTRICT_SYSCALL_DEATH_TEST(getrusage); |
| 190 RESTRICT_SYSCALL_DEATH_TEST(getsid); |
| 191 #if defined(__x86_64__) || defined(__arm__) |
| 192 RESTRICT_SYSCALL_DEATH_TEST(getsockname); |
| 193 #endif |
| 194 #if defined(__x86_64__) || defined(__arm__) |
| 195 RESTRICT_SYSCALL_DEATH_TEST(getsockopt); |
| 196 #endif |
| 197 RESTRICT_SYSCALL_DEATH_TEST(getxattr); |
| 198 #if defined(__i386__) |
| 199 RESTRICT_SYSCALL_DEATH_TEST(gtty); |
| 200 #endif |
| 201 #if defined(__i386__) |
| 202 RESTRICT_SYSCALL_DEATH_TEST(idle); |
| 203 #endif |
| 204 RESTRICT_SYSCALL_DEATH_TEST(init_module); |
| 205 RESTRICT_SYSCALL_DEATH_TEST(inotify_add_watch); |
| 206 RESTRICT_SYSCALL_DEATH_TEST(inotify_init); |
| 207 RESTRICT_SYSCALL_DEATH_TEST(inotify_init1); |
| 208 RESTRICT_SYSCALL_DEATH_TEST(inotify_rm_watch); |
| 209 RESTRICT_SYSCALL_DEATH_TEST(io_cancel); |
| 210 RESTRICT_SYSCALL_DEATH_TEST(io_destroy); |
| 211 RESTRICT_SYSCALL_DEATH_TEST(io_getevents); |
| 212 RESTRICT_SYSCALL_DEATH_TEST(io_setup); |
| 213 RESTRICT_SYSCALL_DEATH_TEST(io_submit); |
| 214 #if defined(__i386__) || defined(__x86_64__) |
| 215 RESTRICT_SYSCALL_DEATH_TEST(ioperm); |
| 216 #endif |
| 217 #if defined(__i386__) || defined(__x86_64__) |
| 218 RESTRICT_SYSCALL_DEATH_TEST(iopl); |
| 219 #endif |
| 220 RESTRICT_SYSCALL_DEATH_TEST(ioprio_get); |
| 221 RESTRICT_SYSCALL_DEATH_TEST(ioprio_set); |
| 222 #if defined(__i386__) |
| 223 RESTRICT_SYSCALL_DEATH_TEST(ipc); |
| 224 #endif |
| 225 RESTRICT_SYSCALL_DEATH_TEST(kexec_load); |
| 226 RESTRICT_SYSCALL_DEATH_TEST(keyctl); |
| 227 RESTRICT_SYSCALL_DEATH_TEST(kill); |
| 228 RESTRICT_SYSCALL_DEATH_TEST(lchown); |
| 229 #if defined(__i386__) || defined(__arm__) |
| 230 RESTRICT_SYSCALL_DEATH_TEST(lchown32); |
| 231 #endif |
| 232 RESTRICT_SYSCALL_DEATH_TEST(lgetxattr); |
| 233 RESTRICT_SYSCALL_DEATH_TEST(link); |
| 234 RESTRICT_SYSCALL_DEATH_TEST(linkat); |
| 235 #if defined(__x86_64__) || defined(__arm__) |
| 236 RESTRICT_SYSCALL_DEATH_TEST(listen); |
| 237 #endif |
| 238 RESTRICT_SYSCALL_DEATH_TEST(listxattr); |
| 239 RESTRICT_SYSCALL_DEATH_TEST(llistxattr); |
| 240 #if defined(__i386__) |
| 241 RESTRICT_SYSCALL_DEATH_TEST(lock); |
| 242 #endif |
| 243 RESTRICT_SYSCALL_DEATH_TEST(lookup_dcookie); |
| 244 RESTRICT_SYSCALL_DEATH_TEST(lremovexattr); |
| 245 #if defined(__i386__) || defined(__arm__) |
| 246 RESTRICT_SYSCALL_DEATH_TEST(lseek); |
| 247 #endif |
| 248 RESTRICT_SYSCALL_DEATH_TEST(lsetxattr); |
| 249 RESTRICT_SYSCALL_DEATH_TEST(lstat); |
| 250 #if defined(__i386__) || defined(__arm__) |
| 251 RESTRICT_SYSCALL_DEATH_TEST(lstat64); |
| 252 #endif |
| 253 RESTRICT_SYSCALL_DEATH_TEST(mbind); |
| 254 #if defined(__i386__) || defined(__x86_64__) |
| 255 RESTRICT_SYSCALL_DEATH_TEST(migrate_pages); |
| 256 #endif |
| 257 RESTRICT_SYSCALL_DEATH_TEST(mincore); |
| 258 RESTRICT_SYSCALL_DEATH_TEST(mkdir); |
| 259 RESTRICT_SYSCALL_DEATH_TEST(mkdirat); |
| 260 RESTRICT_SYSCALL_DEATH_TEST(mknod); |
| 261 RESTRICT_SYSCALL_DEATH_TEST(mknodat); |
| 262 RESTRICT_SYSCALL_DEATH_TEST(mlock); |
| 263 RESTRICT_SYSCALL_DEATH_TEST(mlockall); |
| 264 #if defined(__i386__) |
| 265 RESTRICT_SYSCALL_DEATH_TEST(mmap); |
| 266 #endif |
| 267 #if defined(__i386__) || defined(__x86_64__) |
| 268 RESTRICT_SYSCALL_DEATH_TEST(modify_ldt); |
| 269 #endif |
| 270 RESTRICT_SYSCALL_DEATH_TEST(mount); |
| 271 RESTRICT_SYSCALL_DEATH_TEST(move_pages); |
| 272 #if defined(__i386__) |
| 273 RESTRICT_SYSCALL_DEATH_TEST(mpx); |
| 274 #endif |
| 275 RESTRICT_SYSCALL_DEATH_TEST(mq_getsetattr); |
| 276 RESTRICT_SYSCALL_DEATH_TEST(mq_notify); |
| 277 RESTRICT_SYSCALL_DEATH_TEST(mq_open); |
| 278 RESTRICT_SYSCALL_DEATH_TEST(mq_timedreceive); |
| 279 RESTRICT_SYSCALL_DEATH_TEST(mq_timedsend); |
| 280 RESTRICT_SYSCALL_DEATH_TEST(mq_unlink); |
| 281 RESTRICT_SYSCALL_DEATH_TEST(mremap); |
| 282 #if defined(__x86_64__) || defined(__arm__) |
| 283 RESTRICT_SYSCALL_DEATH_TEST(msgctl); |
| 284 #endif |
| 285 #if defined(__x86_64__) || defined(__arm__) |
| 286 RESTRICT_SYSCALL_DEATH_TEST(msgget); |
| 287 #endif |
| 288 #if defined(__x86_64__) || defined(__arm__) |
| 289 RESTRICT_SYSCALL_DEATH_TEST(msgrcv); |
| 290 #endif |
| 291 #if defined(__x86_64__) || defined(__arm__) |
| 292 RESTRICT_SYSCALL_DEATH_TEST(msgsnd); |
| 293 #endif |
| 294 RESTRICT_SYSCALL_DEATH_TEST(msync); |
| 295 RESTRICT_SYSCALL_DEATH_TEST(munlock); |
| 296 RESTRICT_SYSCALL_DEATH_TEST(munlockall); |
| 297 RESTRICT_SYSCALL_DEATH_TEST(name_to_handle_at); |
| 298 #if defined(__x86_64__) |
| 299 RESTRICT_SYSCALL_DEATH_TEST(newfstatat); |
| 300 #endif |
| 301 RESTRICT_SYSCALL_DEATH_TEST(nfsservctl); |
| 302 #if defined(__i386__) || defined(__arm__) |
| 303 RESTRICT_SYSCALL_DEATH_TEST(nice); |
| 304 #endif |
| 305 #if defined(__i386__) |
| 306 RESTRICT_SYSCALL_DEATH_TEST(oldfstat); |
| 307 #endif |
| 308 #if defined(__i386__) |
| 309 RESTRICT_SYSCALL_DEATH_TEST(oldlstat); |
| 310 #endif |
| 311 #if defined(__i386__) |
| 312 RESTRICT_SYSCALL_DEATH_TEST(oldolduname); |
| 313 #endif |
| 314 #if defined(__i386__) |
| 315 RESTRICT_SYSCALL_DEATH_TEST(oldstat); |
| 316 #endif |
| 317 #if defined(__i386__) |
| 318 RESTRICT_SYSCALL_DEATH_TEST(olduname); |
| 319 #endif |
| 320 RESTRICT_SYSCALL_DEATH_TEST(open_by_handle_at); |
| 321 RESTRICT_SYSCALL_DEATH_TEST(openat); |
| 322 RESTRICT_SYSCALL_DEATH_TEST(pause); |
| 323 #if defined(__arm__) |
| 324 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_iobase); |
| 325 #endif |
| 326 #if defined(__arm__) |
| 327 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_read); |
| 328 #endif |
| 329 #if defined(__arm__) |
| 330 RESTRICT_SYSCALL_DEATH_TEST(pciconfig_write); |
| 331 #endif |
| 332 RESTRICT_SYSCALL_DEATH_TEST(perf_event_open); |
| 333 RESTRICT_SYSCALL_DEATH_TEST(personality); |
| 334 RESTRICT_SYSCALL_DEATH_TEST(pipe2); |
| 335 RESTRICT_SYSCALL_DEATH_TEST(pivot_root); |
| 336 RESTRICT_SYSCALL_DEATH_TEST(poll); |
| 337 RESTRICT_SYSCALL_DEATH_TEST(ppoll); |
| 338 RESTRICT_SYSCALL_DEATH_TEST(preadv); |
| 339 RESTRICT_SYSCALL_DEATH_TEST(prlimit64); |
| 340 RESTRICT_SYSCALL_DEATH_TEST(process_vm_readv); |
| 341 RESTRICT_SYSCALL_DEATH_TEST(process_vm_writev); |
| 342 #if defined(__i386__) |
| 343 RESTRICT_SYSCALL_DEATH_TEST(prof); |
| 344 #endif |
| 345 #if defined(__i386__) |
| 346 RESTRICT_SYSCALL_DEATH_TEST(profil); |
| 347 #endif |
| 348 RESTRICT_SYSCALL_DEATH_TEST(pselect6); |
| 349 #if defined(__i386__) || defined(__x86_64__) |
| 350 RESTRICT_SYSCALL_DEATH_TEST(putpmsg); |
| 351 #endif |
| 352 RESTRICT_SYSCALL_DEATH_TEST(pwritev); |
| 353 #if defined(__i386__) || defined(__x86_64__) |
| 354 RESTRICT_SYSCALL_DEATH_TEST(query_module); |
| 355 #endif |
| 356 RESTRICT_SYSCALL_DEATH_TEST(quotactl); |
| 357 RESTRICT_SYSCALL_DEATH_TEST(readahead); |
| 358 #if defined(__i386__) |
| 359 RESTRICT_SYSCALL_DEATH_TEST(readdir); |
| 360 #endif |
| 361 RESTRICT_SYSCALL_DEATH_TEST(readlinkat); |
| 362 RESTRICT_SYSCALL_DEATH_TEST(readv); |
| 363 RESTRICT_SYSCALL_DEATH_TEST(reboot); |
| 364 #if defined(__arm__) |
| 365 RESTRICT_SYSCALL_DEATH_TEST(recv); |
| 366 #endif |
| 367 #if defined(__x86_64__) || defined(__arm__) |
| 368 RESTRICT_SYSCALL_DEATH_TEST(recvfrom); |
| 369 #endif |
| 370 RESTRICT_SYSCALL_DEATH_TEST(recvmmsg); |
| 371 RESTRICT_SYSCALL_DEATH_TEST(remap_file_pages); |
| 372 RESTRICT_SYSCALL_DEATH_TEST(removexattr); |
| 373 RESTRICT_SYSCALL_DEATH_TEST(rename); |
| 374 RESTRICT_SYSCALL_DEATH_TEST(renameat); |
| 375 RESTRICT_SYSCALL_DEATH_TEST(request_key); |
| 376 RESTRICT_SYSCALL_DEATH_TEST(rmdir); |
| 377 RESTRICT_SYSCALL_DEATH_TEST(rt_sigaction); |
| 378 RESTRICT_SYSCALL_DEATH_TEST(rt_sigpending); |
| 379 RESTRICT_SYSCALL_DEATH_TEST(rt_sigprocmask); |
| 380 RESTRICT_SYSCALL_DEATH_TEST(rt_sigqueueinfo); |
| 381 RESTRICT_SYSCALL_DEATH_TEST(rt_sigreturn); |
| 382 RESTRICT_SYSCALL_DEATH_TEST(rt_sigsuspend); |
| 383 RESTRICT_SYSCALL_DEATH_TEST(rt_sigtimedwait); |
| 384 RESTRICT_SYSCALL_DEATH_TEST(rt_tgsigqueueinfo); |
| 385 RESTRICT_SYSCALL_DEATH_TEST(sched_get_priority_max); |
| 386 RESTRICT_SYSCALL_DEATH_TEST(sched_get_priority_min); |
| 387 RESTRICT_SYSCALL_DEATH_TEST(sched_getaffinity); |
| 388 RESTRICT_SYSCALL_DEATH_TEST(sched_getparam); |
| 389 RESTRICT_SYSCALL_DEATH_TEST(sched_getscheduler); |
| 390 RESTRICT_SYSCALL_DEATH_TEST(sched_rr_get_interval); |
| 391 RESTRICT_SYSCALL_DEATH_TEST(sched_setaffinity); |
| 392 RESTRICT_SYSCALL_DEATH_TEST(sched_setparam); |
| 393 RESTRICT_SYSCALL_DEATH_TEST(sched_setscheduler); |
| 394 #if defined(__x86_64__) |
| 395 RESTRICT_SYSCALL_DEATH_TEST(security); |
| 396 #endif |
| 397 #if defined(__i386__) || defined(__x86_64__) |
| 398 RESTRICT_SYSCALL_DEATH_TEST(select); |
| 399 #endif |
| 400 #if defined(__x86_64__) || defined(__arm__) |
| 401 RESTRICT_SYSCALL_DEATH_TEST(semctl); |
| 402 #endif |
| 403 #if defined(__x86_64__) || defined(__arm__) |
| 404 RESTRICT_SYSCALL_DEATH_TEST(semget); |
| 405 #endif |
| 406 #if defined(__x86_64__) || defined(__arm__) |
| 407 RESTRICT_SYSCALL_DEATH_TEST(semop); |
| 408 #endif |
| 409 #if defined(__x86_64__) || defined(__arm__) |
| 410 RESTRICT_SYSCALL_DEATH_TEST(semtimedop); |
| 411 #endif |
| 412 #if defined(__arm__) |
| 413 RESTRICT_SYSCALL_DEATH_TEST(send); |
| 414 #endif |
| 415 RESTRICT_SYSCALL_DEATH_TEST(sendfile); |
| 416 #if defined(__i386__) || defined(__arm__) |
| 417 RESTRICT_SYSCALL_DEATH_TEST(sendfile64); |
| 418 #endif |
| 419 RESTRICT_SYSCALL_DEATH_TEST(sendmmsg); |
| 420 #if defined(__x86_64__) || defined(__arm__) |
| 421 RESTRICT_SYSCALL_DEATH_TEST(sendto); |
| 422 #endif |
| 423 RESTRICT_SYSCALL_DEATH_TEST(set_mempolicy); |
| 424 #if defined(__i386__) || defined(__x86_64__) |
| 425 RESTRICT_SYSCALL_DEATH_TEST(set_thread_area); |
| 426 #endif |
| 427 RESTRICT_SYSCALL_DEATH_TEST(set_tid_address); |
| 428 RESTRICT_SYSCALL_DEATH_TEST(setdomainname); |
| 429 RESTRICT_SYSCALL_DEATH_TEST(setfsgid); |
| 430 #if defined(__i386__) || defined(__arm__) |
| 431 RESTRICT_SYSCALL_DEATH_TEST(setfsgid32); |
| 432 #endif |
| 433 RESTRICT_SYSCALL_DEATH_TEST(setfsuid); |
| 434 #if defined(__i386__) || defined(__arm__) |
| 435 RESTRICT_SYSCALL_DEATH_TEST(setfsuid32); |
| 436 #endif |
| 437 RESTRICT_SYSCALL_DEATH_TEST(setgid); |
| 438 #if defined(__i386__) || defined(__arm__) |
| 439 RESTRICT_SYSCALL_DEATH_TEST(setgid32); |
| 440 #endif |
| 441 RESTRICT_SYSCALL_DEATH_TEST(setgroups); |
| 442 #if defined(__i386__) || defined(__arm__) |
| 443 RESTRICT_SYSCALL_DEATH_TEST(setgroups32); |
| 444 #endif |
| 445 RESTRICT_SYSCALL_DEATH_TEST(sethostname); |
| 446 RESTRICT_SYSCALL_DEATH_TEST(setitimer); |
| 447 RESTRICT_SYSCALL_DEATH_TEST(setns); |
| 448 RESTRICT_SYSCALL_DEATH_TEST(setpgid); |
| 449 RESTRICT_SYSCALL_DEATH_TEST(setpriority); |
| 450 RESTRICT_SYSCALL_DEATH_TEST(setregid); |
| 451 #if defined(__i386__) || defined(__arm__) |
| 452 RESTRICT_SYSCALL_DEATH_TEST(setregid32); |
| 453 #endif |
| 454 RESTRICT_SYSCALL_DEATH_TEST(setresgid); |
| 455 #if defined(__i386__) || defined(__arm__) |
| 456 RESTRICT_SYSCALL_DEATH_TEST(setresgid32); |
| 457 #endif |
| 458 RESTRICT_SYSCALL_DEATH_TEST(setresuid); |
| 459 #if defined(__i386__) || defined(__arm__) |
| 460 RESTRICT_SYSCALL_DEATH_TEST(setresuid32); |
| 461 #endif |
| 462 RESTRICT_SYSCALL_DEATH_TEST(setreuid); |
| 463 #if defined(__i386__) || defined(__arm__) |
| 464 RESTRICT_SYSCALL_DEATH_TEST(setreuid32); |
| 465 #endif |
| 466 RESTRICT_SYSCALL_DEATH_TEST(setrlimit); |
| 467 RESTRICT_SYSCALL_DEATH_TEST(setsid); |
| 468 #if defined(__x86_64__) || defined(__arm__) |
| 469 RESTRICT_SYSCALL_DEATH_TEST(setsockopt); |
| 470 #endif |
| 471 RESTRICT_SYSCALL_DEATH_TEST(settimeofday); |
| 472 RESTRICT_SYSCALL_DEATH_TEST(setuid); |
| 473 #if defined(__i386__) || defined(__arm__) |
| 474 RESTRICT_SYSCALL_DEATH_TEST(setuid32); |
| 475 #endif |
| 476 RESTRICT_SYSCALL_DEATH_TEST(setxattr); |
| 477 #if defined(__i386__) |
| 478 RESTRICT_SYSCALL_DEATH_TEST(sgetmask); |
| 479 #endif |
| 480 #if defined(__x86_64__) || defined(__arm__) |
| 481 RESTRICT_SYSCALL_DEATH_TEST(shmat); |
| 482 #endif |
| 483 #if defined(__x86_64__) || defined(__arm__) |
| 484 RESTRICT_SYSCALL_DEATH_TEST(shmctl); |
| 485 #endif |
| 486 #if defined(__x86_64__) || defined(__arm__) |
| 487 RESTRICT_SYSCALL_DEATH_TEST(shmdt); |
| 488 #endif |
| 489 #if defined(__x86_64__) || defined(__arm__) |
| 490 RESTRICT_SYSCALL_DEATH_TEST(shmget); |
| 491 #endif |
| 492 #if defined(__i386__) || defined(__arm__) |
| 493 RESTRICT_SYSCALL_DEATH_TEST(sigaction); |
| 494 #endif |
| 495 #if defined(__i386__) |
| 496 RESTRICT_SYSCALL_DEATH_TEST(signal); |
| 497 #endif |
| 498 RESTRICT_SYSCALL_DEATH_TEST(signalfd); |
| 499 RESTRICT_SYSCALL_DEATH_TEST(signalfd4); |
| 500 #if defined(__i386__) || defined(__arm__) |
| 501 RESTRICT_SYSCALL_DEATH_TEST(sigpending); |
| 502 #endif |
| 503 #if defined(__i386__) || defined(__arm__) |
| 504 RESTRICT_SYSCALL_DEATH_TEST(sigprocmask); |
| 505 #endif |
| 506 #if defined(__i386__) || defined(__arm__) |
| 507 RESTRICT_SYSCALL_DEATH_TEST(sigreturn); |
| 508 #endif |
| 509 #if defined(__i386__) || defined(__arm__) |
| 510 RESTRICT_SYSCALL_DEATH_TEST(sigsuspend); |
| 511 #endif |
| 512 #if defined(__x86_64__) || defined(__arm__) |
| 513 RESTRICT_SYSCALL_DEATH_TEST(socket); |
| 514 #endif |
| 515 RESTRICT_SYSCALL_DEATH_TEST(splice); |
| 516 #if defined(__i386__) |
| 517 RESTRICT_SYSCALL_DEATH_TEST(ssetmask); |
| 518 #endif |
| 519 RESTRICT_SYSCALL_DEATH_TEST(stat); |
| 520 #if defined(__i386__) || defined(__arm__) |
| 521 RESTRICT_SYSCALL_DEATH_TEST(stat64); |
| 522 #endif |
| 523 RESTRICT_SYSCALL_DEATH_TEST(statfs); |
| 524 #if defined(__i386__) || defined(__arm__) |
| 525 RESTRICT_SYSCALL_DEATH_TEST(statfs64); |
| 526 #endif |
| 527 #if defined(__i386__) |
| 528 RESTRICT_SYSCALL_DEATH_TEST(stime); |
| 529 #endif |
| 530 #if defined(__i386__) |
| 531 RESTRICT_SYSCALL_DEATH_TEST(stty); |
| 532 #endif |
| 533 RESTRICT_SYSCALL_DEATH_TEST(swapoff); |
| 534 RESTRICT_SYSCALL_DEATH_TEST(swapon); |
| 535 RESTRICT_SYSCALL_DEATH_TEST(symlink); |
| 536 RESTRICT_SYSCALL_DEATH_TEST(symlinkat); |
| 537 RESTRICT_SYSCALL_DEATH_TEST(sync); |
| 538 #if defined(__i386__) || defined(__x86_64__) |
| 539 RESTRICT_SYSCALL_DEATH_TEST(sync_file_range); |
| 540 #endif |
| 541 #if defined(__arm__) |
| 542 RESTRICT_SYSCALL_DEATH_TEST(sync_file_range2); |
| 543 #endif |
| 544 RESTRICT_SYSCALL_DEATH_TEST(syncfs); |
| 545 RESTRICT_SYSCALL_DEATH_TEST(sysfs); |
| 546 RESTRICT_SYSCALL_DEATH_TEST(sysinfo); |
| 547 RESTRICT_SYSCALL_DEATH_TEST(syslog); |
| 548 RESTRICT_SYSCALL_DEATH_TEST(tee); |
| 549 RESTRICT_SYSCALL_DEATH_TEST(tgkill); |
| 550 RESTRICT_SYSCALL_DEATH_TEST(timer_create); |
| 551 RESTRICT_SYSCALL_DEATH_TEST(timer_delete); |
| 552 RESTRICT_SYSCALL_DEATH_TEST(timer_getoverrun); |
| 553 RESTRICT_SYSCALL_DEATH_TEST(timer_gettime); |
| 554 RESTRICT_SYSCALL_DEATH_TEST(timer_settime); |
| 555 RESTRICT_SYSCALL_DEATH_TEST(timerfd_create); |
| 556 RESTRICT_SYSCALL_DEATH_TEST(timerfd_gettime); |
| 557 RESTRICT_SYSCALL_DEATH_TEST(timerfd_settime); |
| 558 RESTRICT_SYSCALL_DEATH_TEST(tkill); |
| 559 RESTRICT_SYSCALL_DEATH_TEST(truncate); |
| 560 #if defined(__i386__) || defined(__arm__) |
| 561 RESTRICT_SYSCALL_DEATH_TEST(truncate64); |
| 562 #endif |
| 563 #if defined(__x86_64__) |
| 564 RESTRICT_SYSCALL_DEATH_TEST(tuxcall); |
| 565 #endif |
| 566 #if defined(__i386__) || defined(__arm__) |
| 567 RESTRICT_SYSCALL_DEATH_TEST(ugetrlimit); |
| 568 #endif |
| 569 #if defined(__i386__) |
| 570 RESTRICT_SYSCALL_DEATH_TEST(ulimit); |
| 571 #endif |
| 572 RESTRICT_SYSCALL_DEATH_TEST(umask); |
| 573 #if defined(__i386__) |
| 574 RESTRICT_SYSCALL_DEATH_TEST(umount); |
| 575 #endif |
| 576 RESTRICT_SYSCALL_DEATH_TEST(umount2); |
| 577 RESTRICT_SYSCALL_DEATH_TEST(uname); |
| 578 RESTRICT_SYSCALL_DEATH_TEST(unlink); |
| 579 RESTRICT_SYSCALL_DEATH_TEST(unlinkat); |
| 580 RESTRICT_SYSCALL_DEATH_TEST(unshare); |
| 581 RESTRICT_SYSCALL_DEATH_TEST(uselib); |
| 582 RESTRICT_SYSCALL_DEATH_TEST(ustat); |
| 583 #if defined(__i386__) || defined(__x86_64__) |
| 584 RESTRICT_SYSCALL_DEATH_TEST(utime); |
| 585 #endif |
| 586 RESTRICT_SYSCALL_DEATH_TEST(utimensat); |
| 587 RESTRICT_SYSCALL_DEATH_TEST(utimes); |
| 588 RESTRICT_SYSCALL_DEATH_TEST(vfork); |
| 589 RESTRICT_SYSCALL_DEATH_TEST(vhangup); |
| 590 #if defined(__i386__) |
| 591 RESTRICT_SYSCALL_DEATH_TEST(vm86); |
| 592 #endif |
| 593 #if defined(__i386__) |
| 594 RESTRICT_SYSCALL_DEATH_TEST(vm86old); |
| 595 #endif |
| 596 RESTRICT_SYSCALL_DEATH_TEST(vmsplice); |
| 597 RESTRICT_SYSCALL_DEATH_TEST(vserver); |
| 598 RESTRICT_SYSCALL_DEATH_TEST(wait4); |
| 599 RESTRICT_SYSCALL_DEATH_TEST(waitid); |
| 600 #if defined(__i386__) |
| 601 RESTRICT_SYSCALL_DEATH_TEST(waitpid); |
| 602 #endif |
| 603 RESTRICT_SYSCALL_DEATH_TEST(writev); |
| 604 |
| 605 // ARM specific syscalls. |
| 606 #if defined(__arm__) |
| 607 RESTRICT_ARM_SYSCALL_DEATH_TEST(breakpoint); |
| 608 RESTRICT_ARM_SYSCALL_DEATH_TEST(usr26); |
| 609 RESTRICT_ARM_SYSCALL_DEATH_TEST(usr32); |
| 610 RESTRICT_ARM_SYSCALL_DEATH_TEST(set_tls); |
| 611 #endif |
| 612 |
| 613 } // namespace |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 239703011:
Reland: Add seccomp sandbox for non-SFI NaCl (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@master