Messages in this thread | | | Date | Thu, 26 May 2011 11:57:51 +0300 | Subject | Re: [PATCH 3/5] v2 seccomp_filters: Enable ftrace-based system call filtering | From | Pekka Enberg <> |
| |
Hi Avi,
On Thu, May 26, 2011 at 11:49 AM, Avi Kivity <avi@redhat.com> wrote: > You mean each thread will have a different security context? I don't see > the point. All threads share all of memory so it would be trivial for one > thread to exploit another and gain all of its privileges.
So how would that happen? I'm assuming that once the security context has been set up for a thread, you're not able to change it after that. You'd be able to exploit other threads through shared memory but how would you gain privileges?
Pekka -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |