| commit | 4d3b0b05aae9ee9ce0970dc4cc0fb3fad5e85945 | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Fri Aug 11 13:01:39 2017 -0700 |
| committer | Kees Cook <keescook@chromium.org> | Mon Aug 14 13:46:49 2017 -0700 |
| tree | 28419965980aa84fd98bf361b52f9390fd24f534 | |
| parent | fd76875ca289a3d4722f266fd2d5532a27083903 [diff] |
seccomp: Introduce SECCOMP_RET_KILL_PROCESS This introduces the BPF return value for SECCOMP_RET_KILL_PROCESS to kill an entire process. This cannot yet be reached by seccomp, but it changes the default-kill behavior (for unknown return values) from kill-thread to kill-process. Signed-off-by: Kees Cook <keescook@chromium.org>