The power of SECCOMP_RET_USER_NOTIF and SECCOMP_IOCTL_NOTIF_ADDFD (Part 1)
#5123
rusty-snake
started this conversation in
Ideas
Replies: 2 comments
-
|
Other threads about newer kernel features:
|
Beta Was this translation helpful? Give feedback.
0 replies
-
|
PoC how you can "emulate" open syscalls: https://github.com/rusty-snake/openat_dialog_poc |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
SECCOMP_RET_USER_NOTIF(since Linux 5.0) andSECCOMP_IOCTL_NOTIF_ADDFD(since Linux 5.9) allow to "emulate" file-open syscalls (open,openat,openat2,creat).This could be used to
man 2 seccompandman 2 seccomp_unotifyBeta Was this translation helpful? Give feedback.
All reactions