lkml.org 
[lkml]   [2011]   [Apr]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 5/7] seccomp_filter: Document what seccomp_filter is and how it works.
    Quoting Ingo Molnar (mingo@elte.hu):
    > I've Cc:-ed Linus and Andrew: are you guys opposed to such flexible, dynamic
    > filters conceptually? I think we should really think hard about the actual ABI
    > as this could easily spread to more applications than Chrome/Chromium.

    We want to use it for containers, to try and provide some bit of
    mitigation for the fact that they are sharing a kernel with the host.

    thanks,
    -serge


    \
     
     \ /
      Last update: 2011-04-28 19:45    [W:0.031 / U:91.052 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site