3 ms·

> Not even multi-process. Threads on Linux can have their own seccomp profiles. Feels kinda pointless, since all threads in a process share the same memory pro

by dom0 9y ago

> Not even multi-process. Threads on Linux can have their own seccomp profiles. Feels kinda pointless, since all threads in a process share the same memory protection.

viraptor 9y ago
They don't have to. Clone can do a lot of magic without full processes.
- jbk 9y ago
  But then you need to copy the memory from the decoder to the video output or you get back to the same problem to work-on.
  - Filligree 9y ago
    No, you can use a shared memory segment for a buffer just for that. It's more coding, certainly, but it's possible. Security is an option if we wanted it.
    - jbk 9y ago
      That's exactly the point above. See my above comment.
      - Filligree 9y ago
        I'm not sure, it sounds like you're saying we'd need to copy memory. The shared memory segment can be a GPU image buffer, so I don't think that's true.
        jbk 9y ago
        See comment above with "the solution". Either you need to have multi-process and correct IPC, or you need to copy.