ndhc/src
Nicholas J. Kain e08d3b15b5 Remove seccomp support.
It breaks with the existing whitelists on the latest glibc and is
just too much maintenance burden.  It also causes the most questions
for new users.

Something like openbsd's pledge() would be fine, but I have no
intention of maintaining such a thing.

Most of the value-gain would come from disallowing high-risk
syscalls like ptrace() and the perf syscalls, anyway.

ndhc already uses extensive defense-in-depth and wasn't using
seccomp on non-(x86|x86-64) platforms, so it's not a huge loss.
2018-02-09 03:33:04 -05:00
..
arp.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
arp.h arp: Remove reply_offset, and keep previous ARP packet after epoll. 2017-04-10 08:56:11 -04:00
cfg.h Parse config options with ragel and support a configuration file. 2014-04-14 15:06:31 -04:00
cfg.rl Remove seccomp support. 2018-02-09 03:33:04 -05:00
CMakeLists.txt Parse config options with ragel and support a configuration file. 2014-04-14 15:06:31 -04:00
coroutine.h Separate event state gathering from action dispatch in main epoll loop. 2015-02-15 06:38:03 -05:00
dhcp.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
dhcp.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
duiaid.c Update to the new ncmlib random API. 2017-08-24 02:36:31 -04:00
duiaid.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
ifchange.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
ifchange.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
ifchd-parse.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
ifchd-parse.rl Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
ifchd.c Remove seccomp support. 2018-02-09 03:33:04 -05:00
ifchd.h Check link carrier via ifch and netlink instead of ioctl. 2015-02-15 02:50:29 -05:00
ifset.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
ifset.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
leasefile.c Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
leasefile.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
ndhc-defines.h Update to latest write_pid semantics and don't write pidfile by default. 2016-05-06 15:00:31 -04:00
ndhc.8 Remove seccomp support. 2018-02-09 03:33:04 -05:00
ndhc.c Remove seccomp support. 2018-02-09 03:33:04 -05:00
ndhc.h Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
netlink.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
netlink.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
nl.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
nl.h Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
options.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
options.h Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
rfkill.c Convert logical booleans in client_config_t to bool type. 2017-01-19 05:13:30 -05:00
rfkill.h Convert logical booleans in client_config_t to bool type. 2017-01-19 05:13:30 -05:00
sockd.c Remove seccomp support. 2018-02-09 03:33:04 -05:00
sockd.h Indicate that client_state_t and client_config_t pointer args 2015-02-13 22:29:03 -05:00
state.c Compile cleanly with -Wsign-conversion. 2018-02-09 03:16:59 -05:00
state.h Update copyright dates to 2017. 2017-01-13 20:15:27 -05:00
sys.c Handle possible clock_gettime() errors in curms(). 2017-02-24 08:51:36 -05:00
sys.h Handle possible clock_gettime() errors in curms(). 2017-02-24 08:51:36 -05:00