lkml.org 
[lkml]   [2015]   [Sep]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 5/6] seccomp: add a way to attach a filter via eBPF fd
    On Tue, Sep 08, 2015 at 05:07:03PM -0700, Kees Cook wrote:
    >
    > Yeah, bpf's union looks good. Let's add a "command" flag, though:
    >
    > seccomp(SECCOMP_MODE_FILTER_EBPF, int cmd, union, size);
    >
    > And this cmd could be ADD_FD or something?
    >
    > How's that look?

    I think we can drop the size (using the same strategy as bpf() and
    checking for zeroes at the end), and keep the same signature for
    seccomp(); so:

    seccomp(SECCOMP_MODE_FILTER_EBPF, SECCOMP_ADD_BPF_FD, &union)

    Yes, I'll use this in the next version.

    Tycho


    \
     
     \ /
      Last update: 2015-09-09 17:01    [W:2.447 / U:0.024 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site