The power of SECCOMP_RET_USER_NOTIF and SECCOMP_IOCTL_NOTIF_ADDFD (Part 1)
#5123
rusty-snake
started this conversation in
Ideas
Replies: 2 comments
-
|
Other threads about newer kernel features:
|
Beta Was this translation helpful? Give feedback.
0 replies
-
|
PoC how you can "emulate" open syscalls: https://github.com/rusty-snake/openat_dialog_poc |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
SECCOMP_RET_USER_NOTIF(since Linux 5.0) andSECCOMP_IOCTL_NOTIF_ADDFD(since Linux 5.9) allow to "emulate" file-open syscalls (open,openat,openat2,creat).This could be used to
man 2 seccompandman 2 seccomp_unotifyBeta Was this translation helpful? Give feedback.
All reactions