Re: [RFC] x86: restrict pid namespaces to 32 or 64 bit syscalls

From: H. Peter Anvin
Date: Sun Aug 14 2011 - 01:10:43 EST


Andi Kleen <andi@xxxxxxxxxxxxxx> wrote:

>"H. Peter Anvin" <hpa@xxxxxxxxx> writes:
>>
>> IA64 is totally different. I'm extremely sceptical to this patch; it
>feels like putting code in a super-hot path to paper over a problem
>that has to be fixed anyway.
>
>Sounds to me a better alternative would be more aggressive, pro-active
>fuzzing of the compat calls.
>
>-Andi
>
>--
>ak@xxxxxxxxxxxxxxx -- Speaking for myself only

Agreed. Other than that, I can see a fine-grained permission filter, but the compat vs noncompat axis is just spurious.
--
Sent from my mobile phone. Please excuse my brevity and lack of formatting.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/