Re: [PATCH v7 1/1] man-pages: seccomp.2: document syscall

On Tue, Jun 24, 2014 at 3:23 AM, Michael Kerrisk (man-pages)
[off-list ref] wrote:

On 06/24/2014 12:01 AM, Kees Cook wrote:

quoted

Combines documentation from prctl, and in-kernel seccomp_filter.txt,
along with new details specific to the new syscall.

Great work on the man page, Kees! (BTW, just looking at the complexity detailed
there further supports the decision to grant this functionality as a separate
syscall, rather than multiplexed into prctl(2).

Great, thanks!

Would there be some suitable, not too long program that we
could put in the man page as an example for using filters?

Sure thing. I can modify the "dropper" sample in samples/seccomp. I
will resend the man-page with that added.

Thanks!

-Kees

-- 
Kees Cook
Chrome OS Security