News for hackers. Stuff that matters.

A comment on OpenBSD system-call-origin verification. Parent comment

Re:OpenBSD system-call-origin verification by me_again on Sunday December 22, 2019 @10:43PM (#21861349)
Wouldn't this make containers way more difficult?
[ Parent | on HN ]
Re:OpenBSD system-call-origin verification by quotemstr on Monday December 23, 2019 @09:46AM (#21863883)
Why would it? You need to bootstrap allowed call paths, and whatever init does to do that, PID 1 in a namespace could do that too.
[ Parent | on HN ]