Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Christian Brauner <brauner@xxxxxxxxxx>
Subject: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Tue, 5 Mar 2024 10:33:45 -0800
Cc: Matthew Denton <mpdenton@xxxxxxxxxxxx>, Adrian Ratiu <adrian.ratiu@xxxxxxxxxxxxx>, linux-fsdevel@xxxxxxxxxxxxxxx, kernel@xxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-doc@xxxxxxxxxxxxxxx, Guenter Roeck <groeck@xxxxxxxxxxxx>, Doug Anderson <dianders@xxxxxxxxxxxx>, Jann Horn <jannh@xxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, Randy Dunlap <rdunlap@xxxxxxxxxxxxx>, Mike Frysinger <vapier@xxxxxxxxxxxx>
In-reply-to: <20240305-gremien-faucht-29973b61fb57@brauner>

On Tue, Mar 05, 2024 at 12:03:21PM +0100, Christian Brauner wrote:
> What btw, is the Linux sandbox on Chromium doing? Did they finally move
> away from SECCOMP_RET_TRAP to SECCOMP_RET_USER_NOTIF? I see:
> 
> https://issues.chromium.org/issues/40145101
> 
> What ever became of this?

I'm not entirely sure. I don't think it's been a priority lately
(obviously).

-- 
Kees Cook

References:
- [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Adrian Ratiu
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Kees Cook
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Kees Cook
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner
- Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
  - From: Christian Brauner

Prev by Date: [linux-next:master] BUILD REGRESSION 11afac187274a6177a7ac82997f8691c0f469e41
Next by Date: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
Previous by thread: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
Next by thread: Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes
Index(es):
- Date
- Thread

[Index of Archives] [Linux Ext4 Filesystem] [Union Filesystem] [Filesystem Testing] [Ceph Users] [Ecryptfs] [NTFS 3] [AutoFS] [Kernel Newbies] [Share Photos] [Security] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux Cachefs] [Reiser Filesystem] [Linux RAID] [NTFS 3] [Samba] [Device Mapper] [CEPH Development]