DescriptionLinux NaCl BPF sandbox : restrict clone()
Restrict clone() by defaulting to the baseline policy. This means that
fork() will EPERM and only the flags used by pthread_create() will be allowed.
BUG=367986
R=mseaborn@chromium.org
Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=269167
Patch Set 1 #
Messages
Total messages: 5 (0 generated)
|