[PATCH v4 00/11] Add seccomp notifier ioctl that enables adding fds

Hello! This is a bit of thread-merge between [1] and [2]. tl;dr: add a way for a seccomp user_notif process manager to inject files into the managed process in order to handle emulation of various fd-returning syscalls across security boundaries. Containers folks and Chrome are in need of the feat

Re: [PATCH v4 00/11] Add seccomp notifier ioctl that enables adding fds

On Mon, Jun 15, 2020 at 08:25:13PM -0700, Kees Cook wrote: > Hello! > > This is a bit of thread-merge between [1] and [2]. tl;dr: add a way for > a seccomp user_notif process manager to inject files into the managed > process in order to handle emulation of various fd-returning syscalls > across s