Add seccomp filter to limit system calls - Githubissues

Codu-LLC / sandbox

MIT License

1 stars 0 forks source link

Add seccomp filter to limit system calls #22

Open conankun opened 3 years ago

conankun commented 3 years ago

Example: https://unix.stackexchange.com/questions/404016/computing-sandbox-with-ptrace-inspecting

System calls table: https://chromium.googlesource.com/chromiumos/docs/+/master/constants/syscalls.md

Default seccomp doesn't work since any program with malloc will be terminated.

conankun commented 3 years ago

Also, useful document

https://tech.liuchao.me/2017/11/online-judge-from-scratch-3/