Messages in this thread | | | Date | Wed, 25 May 2011 21:06:02 +0200 | From | Ingo Molnar <> | Subject | Re: [PATCH 3/5] v2 seccomp_filters: Enable ftrace-based system call filtering |
| |
* Linus Torvalds <torvalds@linux-foundation.org> wrote:
> And per-system-call permissions are very dubious. What system calls > don't you want to succeed? That ioctl? You just made it impossible > to do a modern graphical application. Yet the kind of thing where > we would _want_ to help users is in making it easier to sandbox > something like the adobe flash player. But without accelerated > direct rendering, that's not going to fly, is it?
I was under the impression that Will had a very specific application in mind which actually works today and uses the inferior version of seccomp.
Will, mind filling us in on that?
I'd agree that adding any of this without a real serious app making real use of it would be pointless. I discussed this under the impression that the app existed :-)
I also got the very distinct impression from the various iterations that a real usecase existed behind it - all the fixes and considerations looked very realistic, not designed up for security's sake.
> So I'm sorry for throwing cold water on you guys, but the whole > "let's come up with a new security gadget" thing just makes me go > "oh no, not again".
Fair enough :-)
Thanks,
Ingo
| |