[RFC PATCH] seccomp: Add extensibility mechanism to read notifications

Kees Cook keescook at chromium.org
Mon Jun 15 18:26:44 UTC 2020


On Sat, Jun 13, 2020 at 12:26:09AM -0700, Sargun Dhillon wrote:
> This introduces an extensibility mechanism to receive seccomp
> notifications. It uses read(2), as opposed to using an ioctl. The listener
> must be first configured to write the notification via the
> SECCOMP_IOCTL_NOTIF_CONFIG ioctl with the fields that the user is
> interested in.

FYI: I'm not ignoring this, but I'm trying to get the other series
nailed down first. I'll cycle back around to this soon.

-- 
Kees Cook


More information about the Containers mailing list