lkml.org 
[lkml]   [2003]   [Sep]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Syscall security
> >Unfortunately sometimes the data transfer through stdio can be counted in 
> >hundreds of MB (or even in extreme cases a couple of GB), plus it is
>
> Would running the process under user-mode linux help any? (I'm not sure)

I think that's trying to kill a fly with a cannon. Especially since
afterwards the process in UML would still need to be somehow protected
from calling UML syscalls - I'm not quite sure how UML works (never really
used it), but I'm assuming it will still allow getuid/gettimeofday etc
syscalls. Correct me if I'm wrong _or_ if i'm misinterpreting your idea.
Besides sometimes these processes are spawned in the dozens (sometimes
they spawn massively with very little CPU intensity, other times very
rarely but with massive CPU use) - would I then need a seperate UML kernel
per spawn? and if not then how would this help?

Thx,
MaZe.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:48    [W:0.772 / U:0.780 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site