Messages in this thread | | | Date | Mon, 15 Aug 2011 09:29:18 +1000 (EST) | From | James Morris <> | Subject | Re: [RFC] x86: restrict pid namespaces to 32 or 64 bit syscalls |
| |
On Sun, 14 Aug 2011, H. Peter Anvin wrote:
> Last I looked seccomp still had a hardcoded list of system calls, but > perhaps I've been looking in the wrong place. However, since that's > exactly what seccomp is -- a system call filter -- this can, and should, > be unified that way.
Yes, we should definitely look at incorporating this into seccomp v2, which is still under discussion (and a topic at KS).
- James -- James Morris <jmorris@namei.org>
| |