3 ms·
I was curious as to what the issue is. Found some discussion here[1] and here[2]. Anything else? At least with that patch last year you can turn it off, which
by magicalhippo 2y ago
I was curious as to what the issue is. Found some discussion here[1] and here[2].
Anything else?
At least with that patch last year you can turn it off, which seems prudent for servers facing the internet.
[1]: https://lwn.net/Articles/943239/ https://lwn.net/Articles/943239/
[2]: https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-exploiting-an-io_uring-vulnerability-in-ubuntu/ https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-e...
- ibotty 2y agoIMO the big problem is that it's very hard (and AFAIK no way has even be proposed) to restrict from the outside which syscall-alikes are allowed via io_uring. This is trivial with regular syscalls. That's important if you ever co-host applications with different security domains.
- klooney 2y agoI mean, turning it off sort of ruins the point of the exciting new interface.