Re: Compat 32-bit syscall entry from 64-bit task!?

From: Andi Kleen
Date: Wed Jan 18 2012 - 14:45:29 EST


> Umm. But the exact same is true of "LSM for custom jail". It's a
> f*&^ing disaster, and it's a whole lot more complicated than ptrace.
>
> Plus it can't even do what ptrace does, so what's the point? There's

It can securely enable syscall auditing which can catch all syscalls
(however you only get race free memory arguments for the ones with LSM hooks
at the right place). Really need both.

I agree it's not easy to get tight (and also not pretty), but you have a lot
better chance doing it this way than with ptrace.

-Andi
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/