seccomp: Introduce SECCOMP_RET_KILL_PROCESS
authorKees Cook <keescook@chromium.org>
Fri, 11 Aug 2017 20:01:39 +0000 (13:01 -0700)
committerKees Cook <keescook@chromium.org>
Mon, 14 Aug 2017 20:46:49 +0000 (13:46 -0700)
commit4d3b0b05aae9ee9ce0970dc4cc0fb3fad5e85945
tree28419965980aa84fd98bf361b52f9390fd24f534
parentfd76875ca289a3d4722f266fd2d5532a27083903
seccomp: Introduce SECCOMP_RET_KILL_PROCESS

This introduces the BPF return value for SECCOMP_RET_KILL_PROCESS to kill
an entire process. This cannot yet be reached by seccomp, but it changes
the default-kill behavior (for unknown return values) from kill-thread to
kill-process.

Signed-off-by: Kees Cook <keescook@chromium.org>
include/uapi/linux/seccomp.h
kernel/seccomp.c