4 ms·
seccomp escapes are a thing and if you're inside a restrictive environment such as WASM, it is harder to achieve it.
by feanaro 6y ago
seccomp escapes are a thing and if you're inside a restrictive environment such as WASM, it is harder to achieve it.
- CyberRabbi 6y agoI think you’re referring to seccomp-bpf. seccomp has never been escaped and it is unlikely such a bug could happen due its simplicity. If you do not know the difference between seccomp and seccomp-bpf, please check references: https://en.wikipedia.org/wiki/Seccomp https://en.wikipedia.org/wiki/Seccomp
- tuwtuwtuwtuw 6y agoUnlikely? Sounds like you think it could happen.
- CyberRabbi 6y agoNothing is 100%. It’s effectively impossible.
- bobthebuilders 6y agoThis disproves your point. How many "effectively impossible" exploits have come out recently?
- CyberRabbi 6y agoThe semantic gymnastics here are pretty interesting. It’s about as secure / impossible to penetrate as anyone could reasonably guarantee in the face of future uncertainty. If you don’t understand why, please check references on how seccomp works: https://en.Wikipedia.org/wiki/Seccomp https://en.Wikipedia.org/wiki/Seccomp