[sudo-commits] sudo changeset 10669:59d76bdc0f0c

[Todd C. Miller]

changeset:	10669:59d76bdc0f0c in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/59d76bdc0f0c
user:		Todd C. Miller <Todd.Miller at courtesan.com>
date:		Sat Oct 08 19:09:17 2016 -0600

Log Message:
	Use a seccomp filter on Linux to disable execve(2) and execveat(2).
	This still relies on LD_PRELOAD to work so it has the same issues
	as the existing mether with respect to running 32-bit binaries on
	a 64-bit kernel.

diffstat:

 config.h.in       |   3 +++
 configure         |  17 +++++++++++++++++
 configure.ac      |   2 ++
 src/sudo_noexec.c |  48 ++++++++++++++++++++++++++++++++++++++++++++++++
 4 files changed, 70 insertions(+), 0 deletions(-)