From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.6 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id D1FE1C4727C for ; Mon, 21 Sep 2020 22:58:05 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 88DE923A1B for ; Mon, 21 Sep 2020 22:58:05 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="W4l5lute" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728672AbgIUW5y (ORCPT ); Mon, 21 Sep 2020 18:57:54 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:35324 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728662AbgIUW5y (ORCPT ); Mon, 21 Sep 2020 18:57:54 -0400 Received: from mail-pf1-x443.google.com (mail-pf1-x443.google.com [IPv6:2607:f8b0:4864:20::443]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id AFE9AC061755; Mon, 21 Sep 2020 15:57:54 -0700 (PDT) Received: by mail-pf1-x443.google.com with SMTP id n14so10610892pff.6; Mon, 21 Sep 2020 15:57:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=mcI5ReI6UwbL3Y9VJsKxXjGv/OVvfXvskB57PaK2fIg=; b=W4l5lutecwZ6k8fboRiFxU1Hxvcgtrnw4cWWOU59OcbmJ7FVpQASAgTiMg+NRQBf4/ tbazCRYfVl6lEvWObHic3/v4bewoM3wo+QpDDwiCrFzI+K3hTSklL74Tza9nCmiz8ycw TRFTMwG8wrTzbGND2vTuSPj8hFZnyp2y/w2tnvfMbnbWpm8KdkdCWDp1ws+KJQaDvDyM 4LTgwDzrwy+DX5SAFuLftsDAQxlkV5e0XM99+Z/qbnmwt7W77anx7EPdzBTWYLqUsy/Q SQatbhz1BXbbf7xsBwgcG0nimBTsIEdOJfkFrOu8c0gvQN5LY1XtgD43Xz+qF9sPe7HP Zmsg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=mcI5ReI6UwbL3Y9VJsKxXjGv/OVvfXvskB57PaK2fIg=; b=AafV75x61GI706GhGi9uTxO5Gc7xAkXTPxOTHDa3hQn1OHcjLw6MWFekg7z53NcX+j 9Ct2o9QLV4JthGU5F4hTVw4cT28YX44ezVGWAHOgqheq3FMHrrZejtEh4/Y0PNex+w5k Faz9lYido9mfYuYjBEk8GJCo2ghGNICgp6MVPdxxuj2axyngWDoxUDi3WxWgPi8IywBT sdrKS6YhOmaThaETyGgC49mXUNZiOSg/pRvgJMFSqDMTlrqrGza5bKsjTdh5HGjCkHvH hgVJ6EWdyW+V8t8ZS8usrin0jpLvjzTtdDd9eWUSJ0ttEAoCsugHw7O1RdUA5B2R5vNY rClA== X-Gm-Message-State: AOAM5322MSc3iVwtYHll4YY20+S76iEwBgLncfCyL60Yt/MdAOw+c7Ql E9Gz7J/PiH+3iFFP/EBUW+PFlLigHaLFT3bl8C8= X-Google-Smtp-Source: ABdhPJxmNmNeUhF6KGE9L0xFvJuiYivilDKG16tiyTwkR0KEi87a+EGJhK6cBjkll4oKTyv/9auskXQqWXDxyuQxzvM= X-Received: by 2002:a63:5043:: with SMTP id q3mr1315846pgl.293.1600729074167; Mon, 21 Sep 2020 15:57:54 -0700 (PDT) MIME-Version: 1.0 References: <20200921135115.GC3794348@cisco> <20200921163916.GE3794348@cisco> In-Reply-To: <20200921163916.GE3794348@cisco> From: YiFei Zhu Date: Mon, 21 Sep 2020 17:57:43 -0500 Message-ID: Subject: Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls To: Tycho Andersen Cc: Linux Containers , Andrea Arcangeli , Giuseppe Scrivano , Kees Cook , YiFei Zhu , Tobin Feldman-Fitzthum , Dimitrios Skarlatos , Valentin Rothberg , Hubertus Franke , Jack Chen , Josep Torrellas , bpf , Tianyin Xu , Andy Lutomirski , Will Drewry , Jann Horn , Aleksa Sarai , kernel list Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: bpf@vger.kernel.org On Mon, Sep 21, 2020 at 11:39 AM Tycho Andersen wrote: > I see, I missed this somehow. So is there a reason to hide this behind > a config option? Isn't it just always better? > > Tycho You have a good point, though, I think keeping a config would allow people to "test the differences" in the unlikely case that some issue occurs. Jann pointed that it should be on by default so I'll do that. YiFei Zhu