Closed Kyle-Kyle closed 5 years ago
If combined with return-address-specific filter to functions like open, system. Oops.
Slick! It'd be cool to see this generalized to let rules be specified via environment variables in the future.
Could you rename the leftover "desock" functions to "deexec"?
On Sun, Mar 17, 2019 at 6:02 AM Kyle Zeng notifications@github.com wrote:
If combined with return-address-specific filter to functions like open, system. Oops.
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/zardus/preeny/pull/55#issuecomment-473596294, or mute the thread https://github.com/notifications/unsubscribe-auth/ADSzl3t9PSZxbrMkdZqlgR1rSlGUuyseks5vXWnygaJpZM4b4DHg .
Thanks!
Easy to add seccomp rules and deploy, hard to prevent players from using it.