On Wed, Jan 10, 2024 at 10:56 AM Yafang Shao <laoar.shao@xxxxxxxxx> wrote: > On Wed, Jan 10, 2024 at 10:28 PM Paul Moore <paul@xxxxxxxxxxxxxx> wrote: > > On Wed, Jan 10, 2024 at 1:07 AM Yafang Shao <laoar.shao@xxxxxxxxx> wrote: > > > Paul, > > > > > > Do you have any additional comments or further suggestions? > > > > No, I'm still comfortable with my original comments and stand by them. > > I understand your perspective, but it seems I have to propose an > eBPF-based seccomp in the next step. You likely already know this, but just in case, eBPF-based seccomp has been proposed many times in the past and has been rejected. I don't want to dissuade you from doing so again, but I suspect that this use case will not be compelling enough to be successful. -- paul-moore.com