Messages in this thread |  | | | Date | Thu, 28 Apr 2011 12:43:34 -0500 | | From | "Serge E. Hallyn" <> | | Subject | Re: [PATCH 5/7] seccomp_filter: Document what seccomp_filter is and how it works. |
| |
Quoting Ingo Molnar (mingo@elte.hu): > I've Cc:-ed Linus and Andrew: are you guys opposed to such flexible, dynamic > filters conceptually? I think we should really think hard about the actual ABI > as this could easily spread to more applications than Chrome/Chromium.
We want to use it for containers, to try and provide some bit of mitigation for the fact that they are sharing a kernel with the host.
thanks, -serge
|  |