"Markus Gutschke (ÜÒÐ)" <markus@xxxxxxxxxx> writes: > > There are a large number of system calls that "normal" C/C++ code uses > quite frequently, and that are not security sensitive. A typical > example would be gettimeofday(). At least on x86-64 gettimeofday() (and time(2)) work inside seccomp because they're vsyscalls that run in ring 3 only. -Andi -- ak@xxxxxxxxxxxxxxx -- Speaking for myself only.
