# Re: \[PATCH 3/5\] v2 seccomp\_filters: Enable ftrace-based system call filtering

- From: James Morris \<jmorris@namei.org\>
- Date: 2011-05-13 00:18:52 
- List: linuxppc-dev
- Page: https://ratatoskr.run/linuxppc-dev/2011/05/8575573
- Thread: https://ratatoskr.run/linux-arm-kernel/2011/05/8575504/t.md

```text
On Thu, 12 May 2011, Ingo Molnar wrote:
> Funnily enough, back then you wrote this:
> 
>   " I'm concerned that we're seeing yet another security scheme being designed on 
>     the fly, without a well-formed threat model, and without taking into account 
>     lessons learned from the seemingly endless parade of similar, failed schemes. "
> 
> so when and how did your opinion of this scheme turn from it being an "endless 
> parade of failed schemes" to it being a "well-defined and readily 
> understandable feature"? :-)

When it was defined in a way which limited its purpose to reducing the 
attack surface of the sycall interface.


- James
-- 
James Morris
[ref]
```