| |||||||||||||
Systemd gets seccomp filter supportSystemd gets seccomp filter supportPosted Jul 18, 2012 2:21 UTC (Wed) by jcm (subscriber, #18262)In reply to: Systemd gets seccomp filter support by mezcalero Parent article: Systemd gets seccomp filter support
Just a note here. "Everybody" is "one who is skilled in the art" (of computer programming on Unix and Linux systems). That isn't most sysadmins. It's perhaps most sysadmins I hang out with, but it's not most out there. The idea of sysadmins writing system call filters terrifies me from a support perspective :)
(Log in to post comments)
Systemd gets seccomp filter support Posted Jul 18, 2012 17:55 UTC (Wed) by cmccabe (guest, #60281) [Link]
Yeah, I thought the whole idea behind seccomp was that developers would add sandboxing to their own programs. Adding it as yet another sysadmin-configurable knob seems like exactly the wrong direction to go.
|
|||||||||||||