3 ms·
malloc can use mmap (aside from s/brk) - it's impossible these days to sandbox any more complex program and not allow mmap (arguments can be limited though to o
by jagrsw 3y ago
malloc can use mmap (aside from s/brk) - it's impossible these days to sandbox any more complex program and not allow mmap (arguments can be limited though to only a subset of flags).
- londons_explore 3y agoBut that would be the same for both this proposed mseal() and my proposed seccomp solution.