Messages in this thread | | | Date | Wed, 18 Jan 2012 20:44:20 +0100 | From | Andi Kleen <> | Subject | Re: Compat 32-bit syscall entry from 64-bit task!? |
| |
> Umm. But the exact same is true of "LSM for custom jail". It's a > f*&^ing disaster, and it's a whole lot more complicated than ptrace. > > Plus it can't even do what ptrace does, so what's the point? There's
It can securely enable syscall auditing which can catch all syscalls (however you only get race free memory arguments for the ones with LSM hooks at the right place). Really need both.
I agree it's not easy to get tight (and also not pretty), but you have a lot better chance doing it this way than with ptrace.
-Andi
| |