Re: [PATCH v9 05/13] seccomp_filter: Document what seccomp

From:		Ingo Molnar <mingo-AT-elte.hu>
To:		Will Drewry <wad-AT-chromium.org>
Subject:		Re: [PATCH v9 05/13] seccomp_filter: Document what seccomp_filter is and how it works.
Date:		Fri, 1 Jul 2011 15:07:05 +0200
Message-ID:		<20110701130705.GG12605@elte.hu>
Cc:		James Morris <jmorris-AT-namei.org>, Chris Evans <scarybeasts-AT-gmail.com>, linux-kernel-AT-vger.kernel.org, Linus Torvalds <torvalds-AT-linux-foundation.org>, djm-AT-mindrot.org, segoon-AT-openwall.com, kees.cook-AT-canonical.com, rostedt-AT-goodmis.org, fweisbec-AT-gmail.com, tglx-AT-linutronix.de, Randy Dunlap <rdunlap-AT-xenotime.net>, linux-doc-AT-vger.kernel.org, Eric Paris <eparis-AT-redhat.com>, linux-security-module-AT-vger.kernel.org
Archive-link:		Article, Thread


* Will Drewry <wad@chromium.org> wrote:

> On Fri, Jul 1, 2011 at 6:56 AM, Ingo Molnar <mingo@elte.hu> wrote:
> >
> > * James Morris <jmorris@namei.org> wrote:
> >
> >> On Wed, 29 Jun 2011, Will Drewry wrote:
> >>
> >> > Since it seems that there'll be consumers (openssh, vsftpd,
> >> > kvm/qemu, chromium, chromium os) and feedback quieted down, what
> >> > are the next steps to get this to a pull/no-pull decision points
> >> > (or at least some Ack's or Nack's)?  I know this patch series
> >> > crosses a number of maintainers, and I never know exactly what's
> >> > next when the feedback slows down.
> >>
> >> Are there any outstanding objections to this approach?  How do the
> >> tracing folk feel about it?
> >
> > I think i outlined my objections a couple of times and haven't seen
> > them addressed.
> 
> After our last discussion, I suggested changes which I then undertook
> and reposted.  Those changes have been posted for over two weeks.

Have you addressed my basic objection of why we should go for a more 
complex and less capable variant over a shared yet more capable 
facility:

  http://lkml.kernel.org/r/20110526091518.GE26775@elte.hu

?

You are pushing the 'filter engine' approach currently, not the 
(much) more unified 'event filters' approach.

Thanks,

	Ingo
--
To unsubscribe from this list: send the line "unsubscribe linux-doc" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

(Log in to post comments)

Re: [PATCH v9 05/13] seccomp_filter: Document what seccomp_filter is and how it works.