Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1582294

Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions

Show all headers | View raw

On Mon, Feb 13, 2017 at 7:45 PM, Tyler Hicks <tyhicks@canonical.com> wrote:
> This patch creates a read-only sysctl containing an ordered list of
> seccomp actions that the kernel supports. The ordering, from left to
> right, is the lowest action value (kill) to the highest action value
> (allow). Currently, a read of the sysctl file would return "kill trap
> errno trace allow". The contents of this sysctl file can be useful for
> userspace code as well as the system administrator.

Would this make more sense as a new seccomp(2) mode a la
SECCOMP_HAS_ACTION?  Then sandboxy things that have no fs access could
use it.

--Andy

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH v3 1/4] seccomp: Add sysctl to display available actions Tyler Hicks <tyhicks@canonical.com> - 2017-02-14 04:50 +0100
  Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions Kees Cook <keescook@chromium.org> - 2017-02-16 02:10 +0100
    Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions Tyler Hicks <tyhicks@canonical.com> - 2017-02-16 19:50 +0100
  Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions Andy Lutomirski <luto@amacapital.net> - 2017-02-16 04:20 +0100
    Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions Tyler Hicks <tyhicks@canonical.com> - 2017-02-16 19:50 +0100
      Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions Andy Lutomirski <luto@amacapital.net> - 2017-02-16 20:10 +0100
        Re: [PATCH v3 1/4] seccomp: Add sysctl to display available actions Tyler Hicks <tyhicks@canonical.com> - 2017-02-16 21:10 +0100

csiph-web