Luca Boccassi
4118674169
core: apply sandboxing settings to io_uring operations ( #44617 )
...
io_uring operations bypass several sandboxing settings today.
IORING_OP_SOCKET ignores RestrictAddressFamilies=, IORING_OP_OPENAT can
create SUID files despite RestrictSUIDSGID=, and SystemCallFilter=
doesn't
cover any operation that can do the work of a system call it denies.
Since Linux 7.0, a task can register classic BPF filters for io_uring
operations, and every ring that the task or its children create
afterwards
inherits them. Let's use them in the executor, so that these three
settings
also apply to the equivalent io_uring operations. We also add
IOUringFilter=, which takes an allow or deny list of io_uring
operations,
for operations like IORING_OP_URING_CMD that have no system call of
their
own.
"systemd-analyze io-uring-filter" lists the operations and the system
calls that SystemCallFilter= maps them to.
Once the executor registers io_uring filters, the kernel refuses
task-wide IORING_REGISTER_RESTRICTIONS for the service with EPERM. The
man
pages document that. On older kernels, the existing settings keep their
current behavior, and IOUringFilter= denies io_uring_setup() with
ENOSYS,
so that programs fall back to regular system calls.
2026-11-04 14:01:26 +00:00
..
2026-11-02 09:27:04 +01:00
2026-05-18 02:44:46 +09:00
2024-06-06 12:07:08 +02:00
2026-07-29 03:47:58 +09:00
2024-12-25 17:00:31 +01:00
2026-01-19 22:41:33 +09:00
2026-09-17 02:25:12 +09:00
2023-12-25 09:15:53 +01:00
2026-05-18 02:44:46 +09:00
2026-05-18 02:44:46 +09:00
2026-10-25 09:34:00 +09:00
2026-10-05 19:36:16 +02:00
2026-08-27 05:55:03 +09:00
2026-10-21 04:18:53 +09:00
2026-10-30 14:50:56 +09:00
2026-07-02 17:19:18 +02:00
2026-01-27 13:43:33 +01:00
2026-01-18 15:50:54 +09:00
2024-12-25 17:00:31 +01:00
2026-09-17 02:25:12 +09:00
2026-06-30 09:00:11 +02:00
2025-12-20 15:27:22 +01:00
2026-10-05 10:47:57 +02:00
2025-01-19 04:37:14 +09:00
2025-11-23 18:09:11 +01:00
2026-07-21 14:50:02 +01:00
2026-08-25 06:57:32 +09:00
2024-12-25 17:24:38 +01:00
2026-08-28 12:45:23 +02:00
2026-10-30 16:56:37 +01:00
2025-06-28 15:31:46 +02:00
2024-04-04 02:30:29 +09:00
2025-09-18 10:57:38 +01:00
2026-11-02 09:52:37 +01:00
2026-10-25 09:34:00 +09:00
2023-12-25 15:51:47 +01:00
2024-04-03 17:58:35 +09:00
2024-04-03 17:58:35 +09:00
2024-04-04 02:30:29 +09:00
2024-04-03 17:58:35 +09:00
2024-04-03 17:58:35 +09:00
2026-10-19 22:18:38 +02:00
2024-04-04 02:30:29 +09:00
2025-03-15 07:27:38 +09:00
2026-10-26 21:18:31 +08:00
2025-11-13 00:08:31 +01:00
2026-10-29 19:53:35 +01:00
2026-10-30 20:03:41 +01:00
2026-07-02 17:04:07 +01:00
2023-12-24 09:23:53 +01:00
2025-08-10 13:40:32 +02:00
2023-12-25 15:51:47 +01:00
2026-10-05 10:47:57 +02:00
2023-12-25 15:51:47 +01:00
2024-08-21 15:17:02 +02:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-08-21 15:17:02 +02:00
2025-08-11 10:30:26 +02:00
2025-06-18 16:58:18 +02:00
2026-10-30 16:56:37 +01:00
2026-10-30 16:56:37 +01:00
2026-05-06 10:30:17 +02:00
2025-06-28 15:31:46 +02:00
2026-10-19 13:59:44 +02:00
2024-06-06 12:07:08 +02:00
2026-10-22 09:21:18 +02:00
2026-05-21 16:55:59 +09:00
2024-08-22 04:26:32 +09:00
2026-05-18 02:44:46 +09:00
2025-01-29 04:28:10 +09:00
2023-12-25 15:51:47 +01:00
2025-12-18 10:53:27 +01:00
2025-10-09 06:32:59 +02:00
2023-12-25 15:51:47 +01:00
2026-05-18 21:42:56 +02:00
2025-03-07 18:14:25 +01:00
2026-10-30 16:56:37 +01:00
2026-02-19 15:05:15 +01:00
2025-02-20 18:13:21 +00:00
2024-11-08 14:14:36 +01:00
2026-07-14 09:43:12 +01:00
2025-09-24 14:11:59 +01:00
2026-04-15 14:20:32 +00:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2026-09-03 06:14:31 +09:00
2026-11-04 14:01:26 +00:00
2026-10-14 10:44:21 +01:00
2025-08-11 10:30:26 +02:00
2025-08-11 10:30:26 +02:00
2026-11-02 15:57:51 +01:00
2025-05-13 08:33:10 +09:00
2024-11-26 17:28:14 +01:00
2026-10-30 15:17:41 +09:00
2024-04-03 17:58:39 +09:00
2026-10-05 17:12:38 +02:00
2024-12-25 17:00:31 +01:00
2024-04-03 17:58:35 +09:00
2024-04-03 17:58:35 +09:00
2025-04-02 20:32:17 +09:00
2026-10-21 13:19:49 +02:00
2026-11-03 02:06:43 +01:00
2026-10-17 07:52:31 +02:00
2026-08-13 17:40:50 +08:00
2026-05-18 11:45:03 +01:00
2026-10-21 13:19:49 +02:00
2023-12-25 15:51:47 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2024-04-03 17:58:39 +09:00
2026-09-17 02:25:12 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-09-17 11:49:45 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-10-13 03:28:06 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-09-17 11:49:45 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-09-17 11:49:45 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-25 04:11:29 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2024-12-25 17:24:38 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-09-17 02:25:12 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-10-02 12:41:49 +02:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2025-05-29 18:40:18 +09:00
2026-09-17 02:25:12 +09:00
2025-05-31 04:40:33 +09:00
2025-05-25 05:01:27 +09:00
2025-05-25 05:01:27 +09:00
2024-11-07 18:51:21 +09:00
2023-12-25 15:51:47 +01:00
2026-03-18 10:28:11 +00:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-09-17 02:25:12 +09:00
2026-07-02 17:04:07 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2024-04-20 12:10:42 +02:00
2023-12-25 15:51:47 +01:00
2026-08-02 19:17:03 +09:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2025-10-04 23:26:47 +02:00
2025-04-02 17:29:49 +02:00
2023-12-25 15:51:47 +01:00
2026-10-19 17:43:33 +09:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2026-09-17 02:25:12 +09:00
2026-10-19 17:43:04 +09:00
2024-04-17 22:01:53 +02:00
2024-03-14 14:25:52 +08:00
2026-10-30 13:18:09 -05:00
2026-05-18 10:39:04 +01:00
2025-10-22 09:34:14 +02:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2026-10-31 10:20:30 +00:00
2026-04-20 15:01:17 +01:00
2025-06-05 00:28:01 +02:00
2025-06-05 01:35:08 +02:00
2023-12-25 15:51:47 +01:00
2026-02-17 15:27:24 +01:00
2023-12-25 15:51:47 +01:00
2026-10-17 18:02:40 +02:00
2026-05-22 14:55:28 +01:00
2026-11-02 09:27:04 +01:00
2025-04-30 10:34:44 +02:00
2026-07-12 22:44:03 +02:00
2025-04-30 10:34:44 +02:00
2026-06-23 23:10:02 +02:00
2025-09-18 15:56:11 +02:00
2025-04-30 10:34:44 +02:00
2025-09-19 20:25:26 +09:00
2023-12-25 15:51:47 +01:00
2024-04-04 03:23:20 +09:00
2023-12-25 15:51:47 +01:00
2025-04-21 04:18:19 +09:00
2025-06-05 01:35:08 +02:00
2026-08-03 16:26:07 +01:00
2026-03-18 10:28:11 +00:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2026-06-28 00:00:11 +09:00
2024-12-25 17:00:31 +01:00
2026-02-17 15:27:24 +01:00
2025-08-10 13:40:32 +02:00
2026-09-10 12:07:06 +01:00
2026-07-14 09:43:12 +01:00
2026-03-20 13:56:44 +00:00
2024-12-25 17:00:31 +01:00
2026-08-29 07:40:43 +09:00
2026-06-21 18:20:53 +01:00
2026-10-25 09:34:00 +09:00
2025-12-24 07:37:58 +01:00
2026-09-17 02:25:12 +09:00
2025-12-12 21:54:47 +09:00
2023-12-26 08:59:53 +01:00
2026-01-07 00:47:53 +01:00
2025-10-16 12:58:59 +01:00
2023-12-26 08:59:53 +01:00
2026-11-04 14:51:23 +01:00
2024-12-25 17:24:38 +01:00
2026-11-04 10:54:29 +01:00
2023-12-25 15:51:47 +01:00
2024-11-07 18:51:21 +09:00
2024-11-05 22:57:51 +01:00
2026-10-25 09:34:00 +09:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2026-09-22 21:25:20 +02:00
2026-03-31 09:47:27 +01:00
2025-05-14 09:33:57 +02:00
2026-09-17 02:25:12 +09:00
2026-11-02 11:07:30 +01:00
2026-09-17 02:25:12 +09:00
2026-04-24 14:09:54 +01:00
2026-08-15 15:28:58 +02:00
2026-10-09 11:19:05 +02:00
2026-10-25 09:34:00 +09:00
2026-10-25 09:34:00 +09:00
2026-10-27 16:11:06 -05:00
2026-07-11 15:37:46 +01:00
2026-08-05 16:59:47 +09:00
2023-12-25 15:51:47 +01:00
2025-05-28 15:35:53 +02:00
2025-07-24 11:38:47 +02:00
2023-12-26 13:10:36 +01:00
2025-01-15 13:51:12 +09:00
2026-10-31 20:02:20 +01:00
2026-10-29 19:53:35 +01:00
2023-12-25 15:51:47 +01:00
2026-08-15 15:30:02 +02:00
2025-03-05 12:37:26 +01:00
2026-09-17 02:25:12 +09:00
2026-11-04 07:13:41 +00:00
2026-09-17 02:25:12 +09:00
2026-07-09 13:09:52 +01:00
2026-09-17 02:25:12 +09:00
2026-11-01 21:04:58 +01:00
2024-03-10 16:13:19 +00:00
2024-04-03 22:07:43 +08:00
2025-03-07 18:15:01 +01:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2025-11-23 18:09:11 +01:00
2026-07-19 10:59:59 +01:00
2026-06-22 22:03:12 +02:00
2026-11-03 12:05:59 +01:00
2025-11-23 18:09:11 +01:00
2024-11-05 22:57:51 +01:00
2026-10-26 21:48:55 +08:00
2026-10-25 09:34:00 +09:00
2026-10-25 09:34:00 +09:00
2025-06-21 02:08:03 +09:00
2026-04-22 20:05:38 +02:00
2026-09-17 02:25:12 +09:00
2026-10-10 10:38:15 +02:00
2026-10-27 14:34:17 +00:00
2025-12-18 13:57:32 +01:00
2024-11-05 22:57:51 +01:00
2026-10-10 10:40:03 +02:00
2026-09-22 16:04:26 +02:00
2023-12-25 15:51:47 +01:00
2024-05-25 02:13:00 +09:00
2026-06-01 10:56:16 +02:00
2026-10-30 16:56:37 +01:00
2024-11-24 01:11:42 +09:00
2026-10-25 09:34:00 +09:00
2026-11-02 10:23:08 +01:00
2026-10-07 10:42:54 +02:00
2023-12-25 15:51:47 +01:00
2025-03-03 10:45:57 +01:00
2026-08-24 13:22:56 +01:00
2026-02-20 01:18:54 +09:00
2025-09-26 09:42:13 +02:00
2026-07-09 13:09:52 +01:00
2025-01-28 08:49:49 -05:00
2025-05-04 12:27:50 +09:00
2026-10-31 10:20:31 +00:00
2026-10-31 10:20:30 +00:00
2026-09-29 16:20:41 +02:00
2026-07-29 03:47:58 +09:00
2024-07-28 10:33:49 +01:00
2026-11-02 19:25:33 +01:00
2026-08-17 13:21:31 +02:00
2024-11-05 22:57:51 +01:00
2025-05-28 15:35:53 +02:00
2024-11-05 22:57:51 +01:00
2026-10-21 13:19:49 +02:00
2026-10-21 13:19:49 +02:00
2026-09-17 02:25:12 +09:00
2026-09-17 02:25:12 +09:00
2025-03-25 10:37:12 +01:00
2026-11-02 10:23:08 +01:00
2026-10-16 16:10:23 +02:00
2026-10-07 15:49:45 +02:00
2026-10-07 15:49:45 +02:00
2026-10-17 07:52:31 +02:00
2026-10-07 15:49:45 +02:00
2026-10-09 07:55:32 +02:00
2026-10-07 15:49:45 +02:00
2026-10-19 17:33:12 +00:00
2026-10-07 15:49:45 +02:00
2026-10-09 07:11:34 +02:00
2026-03-24 21:24:48 +01:00
2024-11-26 17:28:14 +01:00
2024-11-11 20:31:08 +01:00
2026-10-21 13:19:49 +02:00
2026-09-18 20:23:00 +02:00
2026-10-25 09:34:00 +09:00
2026-10-05 19:36:16 +02:00
2026-05-20 04:29:59 +09:00
2025-05-28 15:35:53 +02:00
2025-09-03 13:04:34 +02:00
2026-04-17 11:54:47 +02:00
2025-04-20 15:15:54 +02:00
2025-11-13 14:45:51 +01:00
2026-10-25 09:34:00 +09:00
2026-10-25 09:34:00 +09:00
2026-08-17 13:21:31 +02:00
2026-10-29 13:02:45 +01:00
2026-10-25 09:34:00 +09:00
2026-08-21 00:50:02 +09:00
2026-11-02 15:57:51 +01:00
2026-09-23 10:14:25 +02:00
2023-12-25 15:51:47 +01:00
2026-10-29 16:24:46 +01:00
2026-10-17 18:02:40 +02:00
2026-08-26 19:51:31 +01:00
2026-07-29 03:47:58 +09:00
2023-12-25 15:51:47 +01:00
2024-11-05 22:57:51 +01:00
2025-05-28 15:35:53 +02:00
2026-07-29 03:47:58 +09:00
2025-03-05 12:37:51 +01:00
2026-10-13 11:05:48 +00:00
2026-10-13 20:41:53 +02:00
2026-03-26 16:11:34 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2026-08-29 07:40:43 +09:00
2026-03-25 02:02:23 +01:00
2026-10-07 20:59:29 +02:00
2025-07-13 05:49:00 +09:00
2023-12-25 15:51:47 +01:00
2025-09-18 13:29:33 +02:00
2026-10-25 09:34:00 +09:00
2026-08-25 06:58:06 +09:00
2026-10-25 09:34:00 +09:00
2026-10-25 09:34:00 +09:00
2026-10-30 21:15:09 +01:00
2023-12-25 15:51:47 +01:00
2026-11-02 15:57:51 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2026-02-16 11:09:48 +01:00
2025-09-18 10:57:38 +01:00
2024-06-11 18:02:31 +01:00
2026-11-04 10:54:29 +01:00
2026-10-11 10:53:04 +02:00
2026-10-06 10:48:44 +02:00
2026-10-26 14:06:54 +01:00
2026-10-19 22:18:38 +02:00
2023-12-25 15:51:47 +01:00
2026-10-21 10:39:56 -07:00
2026-09-22 18:48:23 +02:00
2026-06-17 08:34:02 +02:00
2026-05-19 14:39:20 +02:00
2026-09-17 02:25:12 +09:00
2026-11-02 07:36:47 +09:00
2026-10-29 17:22:24 +01:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2026-11-02 19:25:33 +01:00
2025-07-03 17:43:01 +02:00
2026-10-14 17:16:19 +02:00
2026-03-24 21:24:48 +01:00
2026-08-08 04:00:31 +09:00
2026-11-02 09:25:31 +01:00
2026-10-22 07:49:34 +09:00
2026-08-02 19:17:51 +09:00
2026-08-06 05:40:45 +09:00
2026-04-08 11:51:09 +01:00
2024-11-05 22:57:51 +01:00
2026-10-26 18:55:53 +01:00
2025-07-13 05:49:09 +09:00
2025-08-01 12:43:44 +01:00
2025-06-17 16:05:12 +02:00
2026-10-20 06:55:47 +02:00
2026-11-02 15:57:51 +01:00
2026-07-09 16:48:26 +02:00
2026-10-17 18:02:40 +02:00
2026-10-31 16:50:25 +01:00
2026-10-17 18:02:40 +02:00
2026-09-17 02:25:12 +09:00
2023-12-24 09:32:26 +01:00
2025-10-04 23:26:47 +02:00
2025-03-24 12:59:27 +00:00
2024-11-11 20:31:08 +01:00
2026-07-30 13:45:52 +08:00
2025-01-19 04:37:14 +09:00
2023-12-25 15:51:47 +01:00
2025-02-26 20:34:15 +09:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2025-09-27 16:28:18 +03:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-06 19:06:40 +09:00
2024-06-06 12:07:08 +02:00
2026-10-23 11:29:54 +09:00
2026-11-01 00:29:19 +09:00
2025-02-27 10:08:50 +01:00
2025-01-05 09:40:05 +05:30
2026-10-15 11:30:00 +02:00
2024-10-04 12:45:21 +01:00
2026-05-21 04:24:55 +09:00
2024-05-28 16:30:54 +02:00
2025-01-23 22:36:39 +01:00
2026-08-05 11:38:46 +09:00
2026-10-28 09:20:42 +01:00
2026-08-25 06:58:06 +09:00
2026-11-01 21:04:58 +01:00
2026-03-06 09:52:37 +09:00
2024-02-17 11:20:00 +00:00
2024-04-04 02:30:29 +09:00
2025-01-19 04:37:14 +09:00