3 ms·
Has the security situation improved?
by klooney 2y ago
Has the security situation improved?
- magicalhippo 2y agoI was curious as to what the issue is. Found some discussion here[1] and here[2]. Anything else? At least with that patch last year you can turn it off, which seems prudent for servers facing the internet. [1]: https://lwn.net/Articles/943239/ https://lwn.net/Articles/943239/ [2]: https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-exploiting-an-io_uring-vulnerability-in-ubuntu/ https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-e...
- ibotty 2y agoIMO the big problem is that it's very hard (and AFAIK no way has even be proposed) to restrict from the outside which syscall-alikes are allowed via io_uring. This is trivial with regular syscalls. That's important if you ever co-host applications with different security domains.
- klooney 2y agoI mean, turning it off sort of ruins the point of the exciting new interface.