News for hackers. Stuff that matters.
Re:Python is 1.3x faster by just adjusting some compiling op... by derefr on Saturday June 12, 2021 @06:07PM (#27487809)
Doesn’t gVisor require symbol interposition to do its sandboxing thing? (At least, for binaries with static-linked runtimes, like the type Golang produces by default.)
Re:Python is 1.3x faster by just adjusting some compiling op... by dathinab on Saturday June 12, 2021 @06:45PM (#27488034)
If you have a fully static-linked library you already don't have symbol interposition.

Furthermore this options still allow the thinks you need interposition for, for calls from/to external dynamic linked libraries like libc.

But most important gVisor is based around intercepting system calls (over simplified), for which you don't need symbol interposition.

Re:Python is 1.3x faster by just adjusting some compiling op... by falldmg on Saturday June 12, 2021 @06:14PM (#27487846)
Symbol interposition? I don't know for sure, but I would guess gVisor is using ptrace or another mechanism, to interpose on syscalls, not library calls. But these flags, I believe, only impact interposition of symbols in the same library, so even if gVisor did use interposition for something, it may not matter.