3 ms·
If the firsts comment, https://lwn.net/Articles/824494/ https://lwn.net/Articles/824494/, is correct, and this can be made secure, I'm excited that this could m
by Ericson2314 6y ago
If the firsts comment, https://lwn.net/Articles/824494/ https://lwn.net/Articles/824494/, is correct, and this can be made secure, I'm excited that this could mean a much more maintainable/easy-to-upstream version of Capsicum/CloudABI.
- trasz 6y agoNot really. Capsicum provides an actual security architecture (capability-based security), as opposed to a ad-hoc bandaid mechanism.
- Ericson2314 6y agoYeah to be clear I would rather see a proper implementation. From the LWN thread I thought Linux didn't have a personality system so this might be a stop-gap way to make a lighter weight implementation, but somebody commented that it in fact does (if barely), so that should be used instead.
- saagarjha 6y agoI don't see any reasonable protection you can have against TOCTOUs dealing with memory, since you could just always race for the small window between the check and the syscall being made.