Re: security problem with seccomp-filter

2015-04-13 Thread Kees Cook
On Sun, Apr 12, 2015 at 2:33 PM, Felix von Leitner wrote: >> What you're describing should work correctly (it's part of the >> regression test suite we use). So, given that, I'd love to get to the >> bottom of what you're seeing. Do you have a URL to your code? What >> architecture are you

Re: security problem with seccomp-filter

2015-04-13 Thread Kees Cook
On Sun, Apr 12, 2015 at 2:33 PM, Felix von Leitner felix-linuxker...@fefe.de wrote: What you're describing should work correctly (it's part of the regression test suite we use). So, given that, I'd love to get to the bottom of what you're seeing. Do you have a URL to your code? What

Re: security problem with seccomp-filter

2015-04-12 Thread Felix von Leitner
> What you're describing should work correctly (it's part of the > regression test suite we use). So, given that, I'd love to get to the > bottom of what you're seeing. Do you have a URL to your code? What > architecture are you running on? Well, I must be doing something wrong then. I extracted

Re: security problem with seccomp-filter

2015-04-12 Thread Felix von Leitner
What you're describing should work correctly (it's part of the regression test suite we use). So, given that, I'd love to get to the bottom of what you're seeing. Do you have a URL to your code? What architecture are you running on? Well, I must be doing something wrong then. I extracted a

Re: security problem with seccomp-filter

2015-03-28 Thread Kees Cook
On Thu, Mar 26, 2015 at 11:39 PM, Richard Weinberger wrote: > Cc'ing seccomp folks. > > On Fri, Mar 27, 2015 at 6:56 AM, Felix von Leitner > wrote: >> Hi, >> >> I have had some great success with seccomp-filter a while ago, so I >> decided to use it to add some defense in depth to a ping program

Re: security problem with seccomp-filter

2015-03-28 Thread Kees Cook
On Thu, Mar 26, 2015 at 11:39 PM, Richard Weinberger richard.weinber...@gmail.com wrote: Cc'ing seccomp folks. On Fri, Mar 27, 2015 at 6:56 AM, Felix von Leitner felix-linuxker...@fefe.de wrote: Hi, I have had some great success with seccomp-filter a while ago, so I decided to use it to

Re: security problem with seccomp-filter

2015-03-27 Thread Richard Weinberger
Cc'ing seccomp folks. On Fri, Mar 27, 2015 at 6:56 AM, Felix von Leitner wrote: > Hi, > > I have had some great success with seccomp-filter a while ago, so I > decided to use it to add some defense in depth to a ping program I wrote. > > The premise is, like for all ping programs I assume, that

security problem with seccomp-filter

2015-03-27 Thread Felix von Leitner
Hi, I have had some great success with seccomp-filter a while ago, so I decided to use it to add some defense in depth to a ping program I wrote. The premise is, like for all ping programs I assume, that it starts setuid root, gets a raw socket, drops privileges, parses the command line,

security problem with seccomp-filter

2015-03-27 Thread Felix von Leitner
Hi, I have had some great success with seccomp-filter a while ago, so I decided to use it to add some defense in depth to a ping program I wrote. The premise is, like for all ping programs I assume, that it starts setuid root, gets a raw socket, drops privileges, parses the command line,

Re: security problem with seccomp-filter

2015-03-27 Thread Richard Weinberger
Cc'ing seccomp folks. On Fri, Mar 27, 2015 at 6:56 AM, Felix von Leitner felix-linuxker...@fefe.de wrote: Hi, I have had some great success with seccomp-filter a while ago, so I decided to use it to add some defense in depth to a ping program I wrote. The premise is, like for all ping