Maciej Żenczykowski
5ae193ae36
clatd: implement seccomp system call protection
...
but only enable it in enforcing mode on aarch64,
since that gets good test coverage via Pixel
on GoogleGuest ipv6-only wifi network
and (for example) T-Mobile US cellular.
For other architectures this will only result
in (automatically ratelimitted to at most 5/s)
audit logs for any 'unusual' system calls.
Test: TreeHugger, manually on Pixel on GoogleGuest wifi
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Id14c6d9db8d7b4652c7358cac101a82ef09843e0
2025-03-18 02:57:06 -07:00
..
.clang-format
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
Android.bp
[DON'T BLOCK] Test ownership migration rules
2024-01-31 12:34:50 +00:00
BUGS
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
clatd.c
clatd: rework sigterm & error handling
2025-03-17 22:53:32 -07:00
clatd.h
clatd: implement seccomp system call protection
2025-03-18 02:57:06 -07:00
clatd_test.cpp
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
common.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
config.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
debug.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
dump.c
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
dump.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
icmp.c
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
icmp.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
ipv4.c
Drop egress multicast on clat interface
2025-02-27 12:45:26 -08:00
ipv6.c
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
LICENSE
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
logging.c
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
logging.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
main.c
clatd: implement seccomp system call protection
2025-03-18 02:57:06 -07:00
METADATA
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
MODULE_LICENSE_APACHE2
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
NOTICE
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
PREUPLOAD.cfg
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
TEST_MAPPING
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
translate.c
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00
translate.h
Add 'clatd/' from commit ' 2007830075'
2023-09-12 11:48:08 -07:00