* Eric W. Biederman <ebiederm@xxxxxxxxxxxx> wrote: > The trouble with attributes is that means you can't filter your system > call arguments with seccomp. [...] There's nothing keeping seccomp from securely fetching those arguments and extending filtering to them as well ... Allowing that would make sense for a lot of other system calls as well. Thanks, Ingo -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
