| Date | Fri, 13 Jan 2012 12:31:53 +1100 (EST) | From | James Morris <> | Subject | Re: [RFC,PATCH 1/2] seccomp_filters: system call filtering using BPF |
| |
On Thu, 12 Jan 2012, Alan Cox wrote:
> In general I like this approach. It's simple, it's compact and it offers > interesting possibilities for solving some interesting problem spaces, > without the full weight of SELinux, SMACK etc which are still needed for > heavyweight security.
Yes, I can see potential to vastly simplify MAC policy in some cases.
- James -- James Morris <jmorris@namei.org>
|