3 ms·
Interesting! I'm in the process of learning Rust (early days, early days) and whatever I write in Rust in the near future will have to interface nicely with C,
by PeterWhittaker 4y ago
Interesting! I'm in the process of learning Rust (early days, early days) and whatever I write in Rust in the near future will have to interface nicely with C, AND for various reasons I also need to become far more expert in BPF than I currently am (just at the "uh, that's what happens I make these seccomp calls" stage right now), so this is a great little project for me to explore. Thank you for that.
That said (you knew there was a "but" coming, right? :->), why ptrace? Was that the only or just the simplest way to do this?
I know this is a PoC, but given disabling ptrace is considered by some (many?) an important security practice (moo), I'm wondering if there is a better alternative?
Thanks!
- javierhonduco 4y agoptrace is not used in this project, is it possible you meant some other system call or project?
- PeterWhittaker 4y agoMy apologies! I saw the inclusion of ptrace.h in run_bpf and assumed the underlying mechanism was ptrace.