Optimization #5373: Prevent process creation by Suricata process - Suricata - Open Information Security Foundation

Actions

Optimization #5373

closed

Prevent process creation by Suricata process

Added by Philippe Antoine 10 months ago. Updated 5 months ago.

Status:

Closed

Priority:

Normal

Assignee:

Philippe Antoine

Target version:

Effort:

Difficulty:

Label:

Description

So that an exploit cannot create another process...

https://github.com/OISF/suricata/pull/7448

Actions

#1

Updated by Philippe Antoine 6 months ago

Should we investigate usage of libseccomp ?

Actions

#2

Updated by Victor Julien 5 months ago

Target version changed from 7.0.0-beta1 to 7.0.0-rc1

Actions

#3

Updated by Victor Julien 5 months ago

Status changed from In Review to Closed

https://github.com/OISF/suricata/pull/7949

Actions

Also available in: Atom PDF