Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Andy Lutomirski
> On Jun 22, 2018, at 9:23 AM, Jann Horn wrote: > >> On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: >> >> The idea here is that the userspace handler should be able to pass an fd >> back to the trapped task, for example so it can be returned from socket(). >> >> I've proposed one

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Andy Lutomirski
> On Jun 22, 2018, at 9:23 AM, Jann Horn wrote: > >> On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: >> >> The idea here is that the userspace handler should be able to pass an fd >> back to the trapped task, for example so it can be returned from socket(). >> >> I've proposed one

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). > > I've proposed one API here, but I'm open to other options. In particular, > this

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). > > I've proposed one API here, but I'm open to other options. In particular, > this

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Tycho Andersen
On Fri, Jun 22, 2018 at 01:34:18AM +0200, Jann Horn wrote: > On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > > > The idea here is that the userspace handler should be able to pass an fd > > back to the trapped task, for example so it can be returned from socket(). > [...] > >

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Tycho Andersen
On Fri, Jun 22, 2018 at 01:34:18AM +0200, Jann Horn wrote: > On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > > > The idea here is that the userspace handler should be able to pass an fd > > back to the trapped task, for example so it can be returned from socket(). > [...] > >

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). [...] > +Userspace can also return file descriptors. For example, one may decide to >

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). [...] > +Userspace can also return file descriptors. For example, one may decide to >

[PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Tycho Andersen
The idea here is that the userspace handler should be able to pass an fd back to the trapped task, for example so it can be returned from socket(). I've proposed one API here, but I'm open to other options. In particular, this only lets you return an fd from a syscall, which may not be enough in

[PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Tycho Andersen
The idea here is that the userspace handler should be able to pass an fd back to the trapped task, for example so it can be returned from socket(). I've proposed one API here, but I'm open to other options. In particular, this only lets you return an fd from a syscall, which may not be enough in