From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757656Ab2B2Rv4 (ORCPT ); Wed, 29 Feb 2012 12:51:56 -0500 Received: from mail-bk0-f46.google.com ([209.85.214.46]:64375 "EHLO mail-bk0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753904Ab2B2Rvy convert rfc822-to-8bit (ORCPT ); Wed, 29 Feb 2012 12:51:54 -0500 Authentication-Results: mr.google.com; spf=pass (google.com: domain of wad@chromium.org designates 10.112.84.233 as permitted sender) smtp.mail=wad@chromium.org; dkim=pass header.i=wad@chromium.org MIME-Version: 1.0 In-Reply-To: References: <1330140111-17201-1-git-send-email-wad@chromium.org> <1330140111-17201-10-git-send-email-wad@chromium.org> <20120227175407.GD10608@redhat.com> <20120228164335.GC3664@redhat.com> <20120229161437.GA3078@redhat.com> <20120229170933.GA6149@redhat.com> Date: Wed, 29 Feb 2012 11:51:49 -0600 Message-ID: Subject: Re: [PATCH v11 10/12] ptrace,seccomp: Add PTRACE_SECCOMP support From: Will Drewry To: Roland McGrath Cc: Oleg Nesterov , linux-kernel@vger.kernel.org, linux-arch@vger.kernel.org, linux-doc@vger.kernel.org, kernel-hardening@lists.openwall.com, netdev@vger.kernel.org, x86@kernel.org, arnd@arndb.de, davem@davemloft.net, hpa@zytor.com, mingo@redhat.com, peterz@infradead.org, rdunlap@xenotime.net, tglx@linutronix.de, luto@mit.edu, eparis@redhat.com, serge.hallyn@canonical.com, djm@mindrot.org, scarybeasts@gmail.com, indan@nul.nu, pmoore@redhat.com, akpm@linux-foundation.org, corbet@lwn.net, eric.dumazet@gmail.com, markus@chromium.org, coreyb@linux.vnet.ibm.com, keescook@chromium.org, Denys Vlasenko Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Feb 29, 2012 at 11:41 AM, Roland McGrath wrote: > I don't think TIF_NOTIFY_RESUME is apropos here.  That only triggers on > returning to user mode, i.e. after syscall exit.  But regardless of the > exact implementation details, I don't think it will be prohibitive to add > some means by which the fast-path can back off before actual syscall entry > and go to the slow path for ptrace reporting. > > Since there is no strong reason to think it can't be reorganized that way > later, I don't see any good rationale for constraining the seccomp-filter > feature definition based on a plan to optimize the implementation in the > future. Sounds good to me. I'll move to ptrace_event and save the problem of code organization for the future. Thanks!