3 ms·
There should be no issue with disabling it altogether by banning its setup and usage syscalls.
by Asmod4n 1y ago
There should be no issue with disabling it altogether by banning its setup and usage syscalls.
- holowoodman 1y agoWhich would be prone to misconfiguration, accidents and exploits. Better to not include it at all.
- Asmod4n 1y agoAre you saying it’s impossible to misuse disabling the accept syscall but it’s prone to misconfiguration with disabling io_uring_enter?
- holowoodman 1y agoI'm saying that just compiling a kernel with stuff not compiled in is misuse-proof. That way you can disable io_uring entirely (but not accept()).
- accelbred 1y agoYup, but that leads to io-uring devs complaining that people dislike software using io-uring because it doesn't run in containers/etc blocking io-uring entirely