Skip to content

Latest commit

 

History

History
22 lines (15 loc) · 524 Bytes

README.md

File metadata and controls

22 lines (15 loc) · 524 Bytes

no_execve

Prevents the process from execveing to a different process, such as bash.

function hooks

Hooks all exec* functions, as well as system and popen and the not-yet-available execveat.

seccomp-bpf

Disallows the execution of execve and execveat system calls. Also disallows all system calls we don't know exist (e.g. if new ones are added). Also disallows all wrong-architecture syscalls (e.g. compatibility mode).

example

$ LD_PRELOAD=$PWD/no_execve.so sh
$ ps
$ echo $?
159