[lkml]   [2011]   [May]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 5/7] seccomp_filter: Document what seccomp_filter is and how it works.
    Quoting Will Drewry (
    > In particular, if the userspace code wants to stage some filters and
    > apply them all at once, when ready, I'm not sure that it makes sense
    > to me to put that complexity in the kernel itself. For instance,

    Hi Will,

    just one note - in my original comment I wasn't actually suggesting
    disabling setting of filters through a writeable file - I was only
    suggesting restricting writing to one's own filters file.

    All the better if it is possible to get a nice prctl-only
    interface, but if it ends up limiting rule expressiveness (or taking
    years to define an interface) then perhaps we should stick with
    prctl for setting seccomp mode, and a more expressive file interface
    for defining filters.


     \ /
      Last update: 2011-05-05 15:17    [W:0.021 / U:4.076 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site