lkml.org 
[lkml]   [2004]   [Aug]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: secure computing for 2.6.7
    From
    Date
    On Sul, 2004-08-01 at 18:29, chris@scary.beasts.org wrote:
    > How hard would it be to have a per-task bitmap of syscalls allowed? This
    > way, a task could restrict to the exact subset of syscalls required for
    > maximum security.

    Very easy indeed, although you might have to do a tiny bit of tweaking
    for kernel made syscalls (eg hotplug triggers).

    You can already do all of this using several user space applications
    that manage it via ptrace. They do have a performance hit however.

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:04    [W:0.025 / U:64.396 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site