How does it protect itself?
How does it protect itself?
Posted Nov 8, 2019 3:20 UTC (Fri) by mathstuf (subscriber, #69389)In reply to: How does it protect itself? by NAR
Parent article: Filesystem sandboxing with eBPF
Presumably the knob for controlling that is outside the sandbox? If they're already outside the sandbox, why not just use that state directly?
Posted Dec 3, 2019 16:10 UTC (Tue)
by cpuguy83 (guest, #107303)
[Link]
How does it protect itself?
The case for this would be containers, where you force an app to run within a specific context rather than the app setting up said context.