| |||||||||||||
Yet another new approach to seccompYet another new approach to seccompPosted Jan 13, 2012 1:32 UTC (Fri) by ebiederm (subscriber, #35028)In reply to: Yet another new approach to seccomp by Cyberax Parent article: Yet another new approach to seccomp
BPF is nice because it is trivial to verify and does not allow backwards branches.
It seems an obvious choice of scripting engine for filtering to me.
(Log in to post comments)
Yet another new approach to seccomp Posted Jul 24, 2012 6:51 UTC (Tue) by jamesmorris (subscriber, #82698) [Link]
All great ideas seem "obvious" after the fact.
It's an inspired work of engineering.
|
|||||||||||||