Re: [PATCH 3/5] v2 seccomp_filters: Enable ftrace-based system call filtering

2011-05-15 Thread Arnd Bergmann
On Saturday 14 May 2011, Will Drewry wrote: Depending on integration, it could even be limited to ioctl commands that are appropriate to a known fd if the fd is opened prior to entering seccomp mode 2. Alternatively, __NR__ioctl could be allowed with a filter of 1 then narrowed through a later

book to learn ppc assembly and architecture

2011-05-15 Thread s shaiju
Hi, what is the best book to learn assembly and architecture . regards, sha ___ Linuxppc-dev mailing list Linuxppc-dev@lists.ozlabs.org https://lists.ozlabs.org/listinfo/linuxppc-dev

Re: [PATCH 3/5] v2 seccomp_filters: Enable ftrace-based system call filtering

2011-05-15 Thread James Morris
On Fri, 13 May 2011, Ingo Molnar wrote: Say i'm a user-space sandbox developer who wants to enforce that sandboxed code should only be allowed to open files in /home/sandbox/, /lib/ and /usr/lib/. It is a simple and sensible security feature, agreed? It allows most code to run well and

Re: [PATCH 10/13] kvm/powerpc: Add support for Book3S processors in hypervisor mode

2011-05-15 Thread Paul Mackerras
On Thu, May 12, 2011 at 12:07:17PM +0300, Avi Kivity wrote: On 05/11/2011 01:44 PM, Paul Mackerras wrote: --- a/include/linux/kvm.h +++ b/include/linux/kvm.h @@ -161,6 +161,7 @@ struct kvm_pit_config { #define KVM_EXIT_NMI 16 #define KVM_EXIT_INTERNAL_ERROR 17 #define

Re: [PATCH 10/13] kvm/powerpc: Add support for Book3S processors in hypervisor mode

2011-05-15 Thread Paul Mackerras
On Sun, May 15, 2011 at 11:58:12PM +0200, Alexander Graf wrote: On 11.05.2011, at 12:44, Paul Mackerras wrote: +#ifdef CONFIG_KVM_BOOK3S_NONHV I really liked how you called the .c file _pr - why call it NONHV now? I agree, CONFIG_KVM_BOOK3S_PR would be better, I'll change it. diff