[PATCH v2 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-05-17 Thread Tycho Andersen
The idea here is that the userspace handler should be able to pass an fd back to the trapped task, for example so it can be returned from socket(). I've proposed one API here, but I'm open to other options. In particular, this only lets you return an fd from a syscall, which may not be enough in

[PATCH v2 4/4] seccomp: add support for passing fds via USER_NOTIF

2018-05-17 Thread Tycho Andersen
The idea here is that the userspace handler should be able to pass an fd back to the trapped task, for example so it can be returned from socket(). I've proposed one API here, but I'm open to other options. In particular, this only lets you return an fd from a syscall, which may not be enough in