Systems and Methods for Restricting Application Binary Interfaces
AssigneeRed Hat, Inc.
InventorsPaul Moore, Dan Walsh, Lennart Poettering
Life of this patent
Estimating the term…
Abstract
Systems and methods for restricting application binary interfaces. An example method may comprise: initializing, by a process spawned by a kernel of an operating system running on a computer system, a system call filter inhibiting at least one type of application binary interface (ABI) calls; receiving a system call issued by a user space program executed by the computer system; intercepting the system call by the system call filter; determining that the system call is disabled by the system call filter; and performing a pre-determined action with respect to the system call.
Claims20
The method, comprising:
- initializing, by a process spawned by a kernel of an operating system running on a computer system, a system call filter inhibiting at least one type of application binary interface (ABI) calls;
- receiving a system call issued by a user space program executed by the computer system;
- intercepting the system call by the system call filter;
- determining that the system call is disabled by the system call filter;
- and
- performing a pre-determined action with respect to the system call.
A system, comprising:
- a memory;
- and
- one or more physical processors, coupled to the memory, to:
- initialize, by a process spawned by a kernel of an operating system running on the system, a system call filter inhibiting at least one type of ABI calls;
- receive a system call issued by a user space program executed by the computer system;
- intercept the system call by the system call filter;
- determine that the system call is disabled by the system call filter;
- and
- perform a pre-determined action with respect to the system call.
A non-transitory computer-readable storage medium comprising executable instructions that, when executed by a computer system, cause the computer system to:
- initialize, by a process spawned by a kernel of an operating system running on the computer system, a system call filter inhibiting at least one type of ABI calls;
- receive a system call issued by a user space program executed by the computer system;
- intercept the system call by the system call filter;
- determine that the system call is disabled by the system call filter;
- and
- perform a pre-determined action with respect to the system call.
Dependencies are inferred from the claim text.