Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Andy Lutomirski
> On Jun 22, 2018, at 9:23 AM, Jann Horn wrote: > >> On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: >> >> The idea here is that the userspace handler should be able to pass an fd >> back to the trapped task, for example so it can be returned from socket(). >> >> I've proposed one

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Andy Lutomirski
> On Jun 22, 2018, at 9:23 AM, Jann Horn wrote: > >> On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: >> >> The idea here is that the userspace handler should be able to pass an fd >> back to the trapped task, for example so it can be returned from socket(). >> >> I've proposed one

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). > > I've proposed one API here, but I'm open to other options. In particular, > this

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-22 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). > > I've proposed one API here, but I'm open to other options. In particular, > this

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Tycho Andersen
On Fri, Jun 22, 2018 at 01:34:18AM +0200, Jann Horn wrote: > On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > > > The idea here is that the userspace handler should be able to pass an fd > > back to the trapped task, for example so it can be returned from socket(). > [...] > >

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Tycho Andersen
On Fri, Jun 22, 2018 at 01:34:18AM +0200, Jann Horn wrote: > On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > > > The idea here is that the userspace handler should be able to pass an fd > > back to the trapped task, for example so it can be returned from socket(). > [...] > >

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). [...] > +Userspace can also return file descriptors. For example, one may decide to >

Re: [PATCH v4 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-06-21 Thread Jann Horn
On Fri, Jun 22, 2018 at 12:05 AM Tycho Andersen wrote: > > The idea here is that the userspace handler should be able to pass an fd > back to the trapped task, for example so it can be returned from socket(). [...] > +Userspace can also return file descriptors. For example, one may decide to >