Re: [LEDE-DEV] [PATCH procd 10/17] seccomp: Log seccomp violations with utrace

2017-09-24 Thread Michal Sojka
On Tue, Sep 12 2017, Michal Sojka wrote: > Older kernel version shipped by LEDE/OpenWrt contained patch > target/linux/generic/patches-3.18/999-seccomp_log.patch that logged > seccomp violations. For some reason, newer kernels do not have this > patch. Without this kind of logging, it is very hard

[LEDE-DEV] [PATCH procd 10/17] seccomp: Log seccomp violations with utrace

2017-09-12 Thread Michal Sojka
Older kernel version shipped by LEDE/OpenWrt contained patch target/linux/generic/patches-3.18/999-seccomp_log.patch that logged seccomp violations. For some reason, newer kernels do not have this patch. Without this kind of logging, it is very hard to setup seccomp whitelist properly, so this comm