24 Jun
2018
24 Jun
'18
7:12 a.m.
* Eric W. Biederman ebiederm@xmission.com wrote:
The trouble with attributes is that means you can't filter your system call arguments with seccomp. [...]
There's nothing keeping seccomp from securely fetching those arguments and extending filtering to them as well ...
Allowing that would make sense for a lot of other system calls as well.
Thanks,
Ingo