[lkml]   [2020]   [Oct]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: For review: seccomp_user_notif(2) manual page
On Wed, Sep 30, 2020 at 4:07 AM Michael Kerrisk (man-pages)
<> wrote:
> Hi Tycho, Sargun (and all),
> I knew it would be a big ask, but below is kind of the manual page
> I was hoping you might write [1] for the seccomp user-space notification
> mechanism. Since you didn't (and because 5.9 adds various new pieces
> that also will need documenting [2]), I did :-). But of course I may
> have made mistakes...
> I've shown the rendered version of the page below, and would love
> to receive review comments from you and others, and acks, etc.
> There are a few FIXMEs sprinkled into the page, including one
> that relates to what appears to me to be a misdesign (possibly
> fixable) in the operation of the SECCOMP_IOCTL_NOTIF_RECV
> operation. I would be especially interested in feedback on that
> FIXME, and also of course the other FIXMEs.
> The page includes an extensive (albeit slightly contrived)
> example program, and I would be happy also to receive comments
> on that program.
> The page source currently sits in a branch (along with the text
> that you sent me for the seccomp(2) page) at
> Thanks,
> Michael
> [1]
> [2] Sargun, can you prepare something on SECCOMP_ADDFD_FLAG_SETFD
> and SECCOMP_IOCTL_NOTIF_ADDFD to be added to this page?
> ====
> --
> Michael Kerrisk
> Linux man-pages maintainer;
> Linux/UNIX System Programming Training:

Should we consider the SECCOMP_GET_NOTIF_SIZES dance to be "deprecated" at
this point, given that the extensible ioctl mechanism works? If we add
new fields to the
seccomp datastructures, we would move them from fixed-size ioctls, to
variable sized
ioctls that encode the datastructure size / length?

-- This is mostly a question for Kees and Tycho.

 \ /
  Last update: 2020-10-01 23:12    [W:0.218 / U:15.356 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site