Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Christian Brauner <brauner@xxxxxxxxxx>
Subject: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Tue, 5 Mar 2024 10:33:45 -0800
Cc: Matthew Denton <mpdenton@xxxxxxxxxxxx>, Adrian Ratiu <adrian.ratiu@xxxxxxxxxxxxx>, linux-fsdevel@xxxxxxxxxxxxxxx, kernel@xxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-doc@xxxxxxxxxxxxxxx, Guenter Roeck <groeck@xxxxxxxxxxxx>, Doug Anderson <dianders@xxxxxxxxxxxx>, Jann Horn <jannh@xxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, Randy Dunlap <rdunlap@xxxxxxxxxxxxx>, Mike Frysinger <vapier@xxxxxxxxxxxx>
In-reply-to: <20240305-gremien-faucht-29973b61fb57@brauner>
References: <20240301213442.198443-1-adrian.ratiu@collabora.com> <20240304-zugute-abtragen-d499556390b3@brauner> <202403040943.9545EBE5@keescook> <20240305-attentat-robust-b0da8137b7df@brauner> <202403050134.784D787337@keescook> <20240305-kontakt-ticken-77fc8f02be1d@brauner> <20240305-gremien-faucht-29973b61fb57@brauner>

On Tue, Mar 05, 2024 at 12:03:21PM +0100, Christian Brauner wrote:
> What btw, is the Linux sandbox on Chromium doing? Did they finally move
> away from SECCOMP_RET_TRAP to SECCOMP_RET_USER_NOTIF? I see:
> 
> https://issues.chromium.org/issues/40145101
> 
> What ever became of this?

I'm not entirely sure. I don't think it's been a priority lately
(obviously).

-- 
Kees Cook

References:
- [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Adrian Ratiu
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Kees Cook
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Kees Cook
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner

Prev by Date: Re: [PATCH] docs: Makefile: Add dependency to $(YNL_INDEX) for targets other than htmldocs
Next by Date: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
Previous by thread: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
Next by thread: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
Index(es):
- Date
- Thread

[Index of Archives] [Kernel Newbies] [Security] [Netfilter] [Bugtraq] [Linux FS] [Yosemite Forum] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Video 4 Linux] [Device Mapper] [Linux Resources]