improve seccomp filter - [merged] #530

Closed sebastinas closed 5 months ago

On GitLab by @valoq on Dec 22, 2022, 19:25

Merges develop -> develop

~~This commit removes system calls used by older glibc and kernel versions such as present in Debian Bullseye.~~

~~The new list has been tested with glibc >= 2.36 and Linux >= 6.0 on Archlinux and Debian Bookworm~~

The new list has been tested with Debian Stable/Bullseye, Debian testing/Bookworm and Arch Linux

This also adds a warning to the strict sandbox if X11 is detected in order to make sure users are aware of the missing process isolation.

The basic filter was updated as well to avoid an issue with firefox

On GitLab by @valoq on Dec 30, 2022, 23:18

added 1 commit

On GitLab by @valoq on Jan 2, 2023, 20:29

added 2 commits

On GitLab by @valoq on Jan 2, 2023, 20:33

added 1 commit

The historical base line is the current Debian stable release. Dropping support for it is a no-go.

On GitLab by @valoq on Jan 6, 2023, 23:37

added 1 commit

On GitLab by @valoq on Jan 6, 2023, 23:42

added 1 commit

On GitLab by @valoq on Jan 6, 2023, 23:56

added 3 commits

On GitLab by @valoq on Jan 6, 2023, 23:59

added 1 commit

On GitLab by @valoq on Jan 7, 2023, 24:02

Added support for Debian bullseye again

On GitLab by @valoq on Jan 7, 2023, 21:16

resolved all threads

On GitLab by @valoq on Jan 20, 2023, 12:30

added 1 commit

mentioned in commit f7d9c39e91eb976bf30c97869c3ad83bae7a5832

pwmt / zathura