| To: | Markus Gutschke (顧孟勤) <markus@google.com> |
|---|---|
| Subject: | Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole |
| From: | Ingo Molnar <mingo@elte.hu> |
| Date: | Wed, 6 May 2009 23:29:13 +0200 |
| Cc: | Linus Torvalds <torvalds@linux-foundation.org>, Roland McGrath <roland@redhat.com>, Andrew Morton <akpm@linux-foundation.org>, x86@kernel.org, linux-kernel@vger.kernel.org, stable@kernel.org, linux-mips@linux-mips.org, sparclinux@vger.kernel.org, linuxppc-dev@ozlabs.org |
| In-reply-to: | <904b25810905061146ged374f2se0afd24e9e3c1f06@mail.gmail.com> |
| Original-recipient: | rfc822;linux-mips@linux-mips.org |
| References: | <20090228030226.C0D34FC3DA@magilla.sf.frob.com> <20090228030413.5B915FC3DA@magilla.sf.frob.com> <alpine.LFD.2.00.0902271932520.3111@localhost.localdomain> <alpine.LFD.2.00.0902271948570.3111@localhost.localdomain> <20090228072554.CFEA6FC3DA@magilla.sf.frob.com> <alpine.LFD.2.00.0902280916470.3111@localhost.localdomain> <904b25810905061146ged374f2se0afd24e9e3c1f06@mail.gmail.com> |
| Sender: | linux-mips-bounce@linux-mips.org |
| User-agent: | Mutt/1.5.18 (2008-05-17) |
* Markus Gutschke (顧孟勤) <markus@google.com> wrote:
> On Sat, Feb 28, 2009 at 10:23, Linus Torvalds
> <torvalds@linux-foundation.org> wrote:
> > And I guess the seccomp interaction means that this is
> > potentially a 2.6.29 thing. Not that I know whether anybody
> > actually _uses_ seccomp. It does seem to be enabled in at least
> > Fedora kernels, but it might not be used anywhere.
>
> In the Linux version of Google Chrome, we are currently working on
> code that will use seccomp for parts of our sandboxing solution.
That's a pretty interesting usage. What would be fallback mode you
are using if the kernel doesnt have seccomp built in? Completely
non-sandboxed? Or a ptrace/PTRACE_SYSCALL based sandbox?
Ingo
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole, Markus Gutschke (顧孟勤) |
|---|---|
| Next by Date: | Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole, Markus Gutschke (顧孟勤) |
| Previous by Thread: | Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole, Markus Gutschke (顧孟勤) |
| Next by Thread: | Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole, Markus Gutschke (顧孟勤) |
| Indexes: | [Date] [Thread] [Top] [All Lists] |