-
Notifications
You must be signed in to change notification settings - Fork 7
/
Copy pathrestrictions.test
264 lines (260 loc) · 7.05 KB
/
restrictions.test
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
resource cpu .50
resource memory 20000000 # 20 Million bytes
resource diskused 100000000 # 100 MB
resource events 10
resource filewrite 10000000
resource fileread 10000000
resource filesopened 20
resource insockets 10
resource outsockets 10
resource netsend 10000
resource netrecv 10000
resource loopsend 1000000
resource looprecv 1000000
resource lograte 3000000
resource random 100000
resource messport 34612 # use for getting an NTP update
resource connport 12345 # Use for first source port for openconnection.
resource messport 12345
resource connport 12346 # Use for second source port for openconnection.
resource messport 12346
resource connport 12347
resource messport 12347
resource connport 12348
resource messport 12348
resource connport 12349
resource messport 12349
resource connport 63100
resource messport 63100
resource connport 63101
resource messport 63101
resource connport 63102
resource messport 63102
resource connport 63103
resource messport 63103
resource connport 63104
resource messport 63104
resource connport 63105
resource messport 63105
resource connport 63106
resource messport 63106
resource connport 63107
resource messport 63107
resource connport 63108
resource messport 63108
resource connport 63109
resource messport 63109
resource connport 63110
resource messport 63110
resource connport 63111
resource messport 63111
resource connport 63112
resource messport 63112
resource connport 63113
resource messport 63113
resource connport 63114
resource messport 63114
resource connport 63115
resource messport 63115
resource connport 63116
resource messport 63116
resource connport 63117
resource messport 63117
resource connport 63118
resource messport 63118
resource connport 63119
resource messport 63119
resource connport 63120
resource messport 63120
resource connport 63121
resource messport 63121
resource connport 63122
resource messport 63122
resource connport 63123
resource messport 63123
resource connport 63124
resource messport 63124
resource connport 63125
resource messport 63125
resource connport 63126
resource messport 63126
resource connport 63127
resource messport 63127
resource connport 63128
resource messport 63128
resource connport 63129
resource messport 63129
resource connport 63130
resource messport 63130
resource connport 63131
resource messport 63131
resource connport 63132
resource messport 63132
resource connport 63133
resource messport 63133
resource connport 63134
resource messport 63134
resource connport 63135
resource messport 63135
resource connport 63136
resource messport 63136
resource connport 63137
resource messport 63137
resource connport 63138
resource messport 63138
resource connport 63139
resource messport 63139
resource connport 63140
resource messport 63140
resource connport 63141
resource messport 63141
resource connport 63142
resource messport 63142
resource connport 63143
resource messport 63143
resource connport 63144
resource messport 63144
resource connport 63145
resource messport 63145
resource connport 63146
resource messport 63146
resource connport 63147
resource messport 63147
resource connport 63148
resource messport 63148
resource connport 63149
resource messport 63149
resource connport 63150
resource messport 63150
resource connport 63151
resource messport 63151
resource connport 63152
resource messport 63152
resource connport 63153
resource messport 63153
resource connport 63154
resource messport 63154
resource connport 63155
resource messport 63155
resource connport 63156
resource messport 63156
resource connport 63157
resource messport 63157
resource connport 63158
resource messport 63158
resource connport 63159
resource messport 63159
resource connport 63160
resource messport 63160
resource connport 63161
resource messport 63161
resource connport 63162
resource messport 63162
resource connport 63163
resource messport 63163
resource connport 63164
resource messport 63164
resource connport 63165
resource messport 63165
resource connport 63166
resource messport 63166
resource connport 63167
resource messport 63167
resource connport 63168
resource messport 63168
resource connport 63169
resource messport 63169
resource connport 63170
resource messport 63170
resource connport 63171
resource messport 63171
resource connport 63172
resource messport 63172
resource connport 63173
resource messport 63173
resource connport 63174
resource messport 63174
resource connport 63175
resource messport 63175
resource connport 63176
resource messport 63176
resource connport 63177
resource messport 63177
resource connport 63178
resource messport 63178
resource connport 63179
resource messport 63179
resource connport 63180
resource messport 63180
resource connport 63181
resource messport 63181
resource connport 63182
resource messport 63182
resource connport 63183
resource messport 63183
resource connport 63184
resource messport 63184
resource connport 63185
resource messport 63185
resource connport 63186
resource messport 63186
resource connport 63187
resource messport 63187
resource connport 63188
resource messport 63188
resource connport 63189
resource messport 63189
resource connport 63190
resource messport 63190
resource connport 63191
resource messport 63191
resource connport 63192
resource messport 63192
resource connport 63193
resource messport 63193
resource connport 63194
resource messport 63194
resource connport 63195
resource messport 63195
resource connport 63196
resource messport 63196
resource connport 63197
resource messport 63197
resource connport 63198
resource messport 63198
resource connport 63199
resource messport 63199
# RepyV1 call restrictions follow below.
call gethostbyname_ex allow
call sendmess allow # the local port type
call stopcomm allow # it doesn't make sense to restrict
call recvmess allow # Allow listening on this port
call openconn allow # allow connections to this port
call waitforconn allow # allow listening on this port
call socket.close allow # let's not restrict
call socket.send allow # let's not restrict
call socket.recv allow # let's not restrict
# open and file.__init__ both have built in restrictions...
call open allow # can write to junk_test.out
call file.__init__ allow # can write to junk_test.out
call file.close allow # shouldn't restrict
call file.flush allow # they are free to use
call file.next allow # free to use as well...
call file.read allow # allow read
call file.readline allow # shouldn't restrict
call file.readlines allow # shouldn't restrict
call file.seek allow # seek doesn't restrict
call file.write allow # shouldn't restrict (open restricts)
call file.writelines allow # shouldn't restrict (open restricts)
call sleep allow # harmless
call settimer allow # we can't really do anything smart
call canceltimer allow # should be okay
call exitall allow # should be harmless
call log.write allow
call log.writelines allow
call getmyip allow # They can get the external IP address
call listdir allow # They can list the files they created
call removefile allow # They can remove the files they create
call randomfloat allow # can get random numbers
call getruntime allow # can get the elapsed time
call getlock allow # can get a mutex