Re: [PATCH 0/4] Document new seccomp interfaces in Linux 4.14

["Michael Kerrisk (man-pages)" <mtk.manpages-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>]

Hello Tyler,

On 10/26/2017 06:11 AM, Tyler Hicks wrote:
> This patchset adds documentation for most of the new user-facing features
> (/proc interfaces, SECCOMP_GET_ACTION_AVAIL operation, SECCOMP_FILTER_FLAG_LOG
> flag, SECCOMP_RET_LOG action) merged into Linux 4.14 (commit
> c0a3a64e723324ae6dda53214061a71de63808c3). All of these features have something
> to do with providing more flexible seccomp logging configuration except for the
> SECCOMP_GET_ACTION_AVAIL operation. 

Thanks for this set! I've applied all of the patches, made a few very minor
tweaks, and pushed to Git.

But, I realize there's some pieces missing about audit logging.
Would you be able/willing to write a patch for the seccomp(2)
page describing the audit details?

> The remaining undocumented changes in 4.14 involve SECCOMP_RET_KILL being
> renamed to SECCOMP_RET_KILL_THREAD and the new SECCOMP_RET_KILL_PROCESS action.
> As I understand it, Kees Cook will be documenting those changes.

Kees, are you there ? ;-)

Cheers,

Michael


-- 
Michael Kerrisk
Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/
Linux/UNIX System Programming Training: http://man7.org/training/
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html