android_packages_modules_Co.../clatd
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Maciej Żenczykowski 5ae193ae36 clatd: implement seccomp system call protection
but only enable it in enforcing mode on aarch64,
since that gets good test coverage via Pixel
on GoogleGuest ipv6-only wifi network
and (for example) T-Mobile US cellular.

For other architectures this will only result
in (automatically ratelimitted to at most 5/s)
audit logs for any 'unusual' system calls.

Test: TreeHugger, manually on Pixel on GoogleGuest wifi
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Id14c6d9db8d7b4652c7358cac101a82ef09843e0
2025-03-18 02:57:06 -07:00
..
.clang-format Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
Android.bp [DON'T BLOCK] Test ownership migration rules 2024-01-31 12:34:50 +00:00
BUGS Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
clatd.c clatd: rework sigterm & error handling 2025-03-17 22:53:32 -07:00
clatd.h clatd: implement seccomp system call protection 2025-03-18 02:57:06 -07:00
clatd_test.cpp Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
common.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
config.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
debug.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
dump.c Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
dump.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
icmp.c Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
icmp.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
ipv4.c Drop egress multicast on clat interface 2025-02-27 12:45:26 -08:00
ipv6.c Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
LICENSE Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
logging.c Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
logging.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
main.c clatd: implement seccomp system call protection 2025-03-18 02:57:06 -07:00
METADATA Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
MODULE_LICENSE_APACHE2 Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
NOTICE Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
PREUPLOAD.cfg Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
TEST_MAPPING Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
translate.c Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00
translate.h Add 'clatd/' from commit '2007830075' 2023-09-12 11:48:08 -07:00