github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

create a new syscall group: @program-keep

Browse source 
`@default-keep` should be used for syscalls used by Firejail itself only.
We are moving some syscalls from `@default-keep` that do not meet this condition into the new group `@program-keep`.
Syscalls in `@program-keep` are not forced to whitelist (we let users decide), but should never be present in `@default` and its sub-groups.

Also move `execv` into `@obsolete` (sparc only, replaced by `execve`).
This commit is contained in:
pierretom 2026-04-01 14:26:38 +02:00
parent ae1858d1fa
commit 9d90daff22
5 changed files with 60 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

1
contrib/syntax/lists/syscall_groups.list
View file

@ -20,6 +20,7 @@ network-io
obsolete
privileged
process
program-keep
raw-io
reboot
resources