Re: [PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action

2017-08-14 Thread Kees Cook
On Mon, Aug 14, 2017 at 1:46 PM, Paul Moore wrote: > On Fri, Aug 11, 2017 at 6:05 PM, Kees Cook wrote: >> This series is the result of Fabricio, Tyler, Will and I going around a >> few times on possible solutions for finding a way to enhance RET_KILL

Re: [PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action

2017-08-14 Thread Kees Cook
On Mon, Aug 14, 2017 at 1:46 PM, Paul Moore wrote: > On Fri, Aug 11, 2017 at 6:05 PM, Kees Cook wrote: >> This series is the result of Fabricio, Tyler, Will and I going around a >> few times on possible solutions for finding a way to enhance RET_KILL >> to kill the process group. There's a lot

Re: [PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action

2017-08-14 Thread Paul Moore
On Fri, Aug 11, 2017 at 6:05 PM, Kees Cook wrote: > This series is the result of Fabricio, Tyler, Will and I going around a > few times on possible solutions for finding a way to enhance RET_KILL > to kill the process group. There's a lot of ways this could be done, > but I

Re: [PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action

2017-08-14 Thread Paul Moore
On Fri, Aug 11, 2017 at 6:05 PM, Kees Cook wrote: > This series is the result of Fabricio, Tyler, Will and I going around a > few times on possible solutions for finding a way to enhance RET_KILL > to kill the process group. There's a lot of ways this could be done, > but I wanted something that

[PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action

2017-08-11 Thread Kees Cook
This series is the result of Fabricio, Tyler, Will and I going around a few times on possible solutions for finding a way to enhance RET_KILL to kill the process group. There's a lot of ways this could be done, but I wanted something that felt cleanest. My sense of what constitutes "clean" has

[PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action

2017-08-11 Thread Kees Cook
This series is the result of Fabricio, Tyler, Will and I going around a few times on possible solutions for finding a way to enhance RET_KILL to kill the process group. There's a lot of ways this could be done, but I wanted something that felt cleanest. My sense of what constitutes "clean" has