Messages in this thread | | | Date | Fri, 11 Jul 2014 09:30:36 -0700 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH 2/3] [RFC] seccomp: give BPF x32 bit when restoring x32 filter |
| |
On 07/11/2014 09:23 AM, Eric Paris wrote: >> >> You're not going to hear me ever say that I like how the x32 ABI was done, it >> is a real mess from a seccomp filter point of view and we have to do some >> nasty stuff in libseccomp to make it all work correctly (see my comments on >> the libseccomp-devel list regarding my severe displeasure over x32), but >> what's done is done. >> >> I think it's too late to change the x32 seccomp filter ABI. > > So we have a security interface that is damn near impossible to get > right. Perfect. > > I think this explains exactly why I support this idea. Make X32 look > like everyone else and put these custom horrific hacks in seccomp if we > are unwilling to 'do it right' > > Honestly, how many people are using seccomp on X32 and would be horribly > pissed if we just fixed it? >
The bigger issue is probably if we will open a problem with the older kernels.
-hpa
| |