lkml.org 
[lkml]   [2011]   [May]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 5/7] seccomp_filter: Document what seccomp_filter is and how it works.
    Quoting Will Drewry (wad@chromium.org):
    > In particular, if the userspace code wants to stage some filters and
    > apply them all at once, when ready, I'm not sure that it makes sense
    > to me to put that complexity in the kernel itself. For instance,

    Hi Will,

    just one note - in my original comment I wasn't actually suggesting
    disabling setting of filters through a writeable file - I was only
    suggesting restricting writing to one's own filters file.

    All the better if it is possible to get a nice prctl-only
    interface, but if it ends up limiting rule expressiveness (or taking
    years to define an interface) then perhaps we should stick with
    prctl for setting seccomp mode, and a more expressive file interface
    for defining filters.

    -serge


    \
     
     \ /
      Last update: 2011-05-05 15:17    [W:4.087 / U:0.216 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site