[MODERATED] Re: [PATCH SSBv11 0/3] seccomp 1

[Andi Kleen <ak@linux.intel.com>]

> Telling people: "We have this shiny new prtcl and your browser will
> eventually use it but until then you're on your own." is just bullshit.

No the browsers will not need to use the prctl. 

The browser will turn on process site isolation (e.g. in Chrome it is already
a config option) then it doesn't need the prctl because leaking data
inside a process doesn't matter.

And the browsers were actually the main target for this. But if they
don't need it it doesn't make that much sense frankly.

For many other programs it is actually awkward to use because they haven't
been enabled for seccomp yet. For those the plain prctl is better.

So essentially you just slow down the browsers for no gain.

-Andi