News for hackers. Stuff that matters.

A comment on Linux: What Can You Epoll?. Parent comment

Re:Linux: What Can You Epoll? by nathants on Saturday October 22, 2022 @05:52PM (#33302543)
with linux 6.0, lsm got the ability to filter io_uring. deny all and carry on.
[ Parent | on HN ]
Re:Linux: What Can You Epoll? by insanitybit on Sunday October 23, 2022 @12:52AM (#33304648)
Can you provide a source? Eager to read about how this is done.
[ Parent | on HN ]
Re:Linux: What Can You Epoll? by nathants on Sunday October 23, 2022 @12:57AM (#33304674)
https://github.com/torvalds/linux/blob/d47136c2801540e80f41e...
[ Parent | on HN ]
Re:Linux: What Can You Epoll? by insanitybit on Sunday October 23, 2022 @01:12AM (#33304743)
Are they just going to keep adding hooks to every new system call implemented for io_uring?
[ Parent | on HN ]
Re:Linux: What Can You Epoll? by nathants on Sunday October 23, 2022 @01:15AM (#33304753)
my understanding is that this hook is the only one, but to properly secure io_uring one has to implement a check for every call here. or just disable it.
[ Parent | on HN ]