snxrzx/mkxp-sunshine
1
0
Fork 0
mirror of https://forgejo.xatacraft.ru/Sunshine/mkxp-sunshine.git synced 2026-08-19 13:29:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

SecurityEngine hardened

Browse source
This commit is contained in:
DepressedTWM 2026-08-15 22:13:51 +04:00
parent de008ddea2
commit 1563229886
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
src/security.cpp
View file

@ -9,6 +9,7 @@
#include <sys/socket.h> #include <sys/socket.h>
#include <seccomp.h> #include <seccomp.h>
//Yes its not best way, anyway better than nothing. //Yes its not best way, anyway better than nothing.
// https://www.man7.org/linux/man-pages/man2/syscalls.2.html
scmp_filter_ctx ctx; scmp_filter_ctx ctx;
const int seccomplist[] = {SCMP_SYS(bpf), const int seccomplist[] = {SCMP_SYS(bpf),
SCMP_SYS(set_mempolicy), SCMP_SYS(set_mempolicy),
@ -60,6 +61,20 @@
SCMP_SYS(setfsgid), SCMP_SYS(setfsgid),
SCMP_SYS(setdomainname), SCMP_SYS(setdomainname),
SCMP_SYS(setns), SCMP_SYS(setns),
SCMP_SYS(unshare),
#ifdef __ARM_NR
SCMP_SYS(breakpoint),
#endif
#ifdef __powerpc__
SCMP_SYS(sys_debug_setcontext),
SCMP_SYS(rtas),
#endif
#ifdef __alpha
SCMP_SYS(oldumount),
#endif
SCMP_SYS(setpgid), SCMP_SYS(setpgid),
SCMP_SYS(pciconfig_write)}; SCMP_SYS(pciconfig_write)};
#endif #endif