From mboxrd@z Thu Jan 1 00:00:00 1970 From: chris hyser Subject: Re: [net-next v3 0/2] eBPF seccomp filters Date: Tue, 27 Feb 2018 18:55:04 -0500 Message-ID: <4fbef77e-92ad-b896-a259-492412ad4c55@oracle.com> References: <20180226072651.GA27045@ircssh-2.c.rugged-nimbus-611.internal> <20180226230418.46nczgkh5csakyu7@ast-mbp> <7fc0fab8-c1bc-bc76-a892-b3faab7d16ad@oracle.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8"; Format="flowed" Content-Transfer-Encoding: base64 Cc: Will Drewry , Netdev , Linux Containers , Alexei Starovoitov , Andy Lutomirski , Sargun Dhillon , Alexei Starovoitov To: Daniel Borkmann , Kees Cook Return-path: In-Reply-To: <7fc0fab8-c1bc-bc76-a892-b3faab7d16ad-QHcLZuEGTsvQT0dZR+AlfA@public.gmane.org> Content-Language: en-US List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org List-Id: netdev.vger.kernel.org PiBPbiAwMi8yNy8yMDE4IDA0OjU4IFBNLCBEYW5pZWwgQm9ya21hbm4gd3JvdGU6ID4+IE9uIDAy LzI3LzIwMTggMDU6NTkgUE0sIGNocmlzIGh5c2VyIHdyb3RlOgo+Pj4gT24gMDIvMjcvMjAxOCAx MTowMCBBTSwgS2VlcyBDb29rIHdyb3RlOgo+Pj4+IE9uIFR1ZSwgRmViIDI3LCAyMDE4IGF0IDY6 NTMgQU0sIGNocmlzIGh5c2VyIDxjaHJpcy5oeXNlckBvcmFjbGUuY29tPiB3cm90ZToKPj4+Pj4g T24gMDIvMjYvMjAxOCAxMTozOCBQTSwgS2VlcyBDb29rIHdyb3RlOgo+Pj4+Pj4gT24gTW9uLCBG ZWIgMjYsIDIwMTggYXQgODoxOSBQTSwgQW5keSBMdXRvbWlyc2tpIDxsdXRvQGFtYWNhcGl0YWwu bmV0Pgo+Pj4+Pj4gd3JvdGU6Cj4+Pj4+Pj4KPj4+Pj4+PiAzLiBTdHJhaWdodC11cCBidWdzLsKg IFRob3NlIGFyZSBleGFjdGx5IGFzIHByb2JsZW1hdGljIGFzIHZlcmlmaWVyCj4+Pj4+Pj4gYnVn cyBpbiBhbnkgb3RoZXIgdW5wcml2aWxlZ2VkIGVCUEYgcHJvZ3JhbSB0eXBlLCByaWdodD/CoCBJ IGRvbid0IHNlZQo+Pj4+Pj4+IHdoeSBzZWNjb21wIGlzIHNwZWNpYWwgaGVyZS4KPj4+Pj4+Cj4+ Pj4+PiBNeSBjb25jZXJuIGlzIG1vcmUgYWJvdXQgdW5pbnRlbmRlZCBkZXNpZ24gbWlzdGFrZXMg b3Igb3RoZXIgZmVhdHVyZQo+Pj4+Pj4gY3JlZXAgd2l0aCBzaWRlLWVmZmVjdHMsIGVzcGVjaWFs bHkgd2hlbiBpdCBjb21lcyB0byBwcml2aWxlZ2VzIGFuZAo+Pj4+Pj4gc3luY2hyb25pemF0aW9u LiBHZXR0aW5nIG5vLW5ldy1wcml2cyBkb25lIGNvcnJlY3RseSwgZm9yIGV4YW1wbGUsCj4+Pj4+ PiB0b29rIHNvbWUgY2FyZWZ1bCB0aG91Z2h0IGFuZCBkaXNjdXNzaW9uLCBhbmQgSSdtIHNoeSBm cm9tIGhvdyBwYWluZnVsCj4+Pj4+PiBUU1lOQyB3YXMgb24gdGhlIHByb2Nlc3MgbG9ja2luZyBz aWRlLCBhbmQgZUJQRiBoYXMgaGFkIHNvbWUgcmF0aGVyCj4+Pj4+PiB1Z2x5IGZsYXdzIGluIHRo ZSBwYXN0IChhbmQgcmVjZW50bHk6IGl0IHdhcyBuaWNlIHRvIGJlIGFibGUgdG8gc2F5Cj4+Pj4+ PiBmb3IgU3BlY3RyZSB0aGF0IHNlY2NvbXAgZmlsdGVycyBjb3VsZG4ndCBiZSBjb25zdHJ1Y3Rl ZCB0byBtYWtlCj4+Pj4+PiBhdHRhY2tzIGJ1dCBlQlBGIGNvdWxkKS4gQWRkaW5nIHRoZSBjb21w bGV4aXR5IG5lZWRzIHRvIGJlIHdvcnRoIHRoZQo+Pgo+PiBXZWxsLCBub3QgcmVhbGx5LiBPbmUg cGFydCBvZiBhbGwgdGhlIFNwZWN0cmUgbWl0aWdhdGlvbnMgdGhhdCB3ZW50IHVwc3RyZWFtCj4+ IGZyb20gQlBGIHNpZGUgd2FzIHRvIGhhdmUgYW4gb3B0aW9uIHRvIHJlbW92ZSBpbnRlcnByZXRl ciBlbnRpcmVseSBhbmQgdGhhdAo+PiBhbHNvIHJlbGF0ZXMgdG8gc2VjY29tcCBldmVudHVhbGx5 LiBCdXQgb3RoZXIgdGhhbiB0aGF0IGFuIGF0dGFja2VyIG1pZ2h0Cj4+IHBvdGVudGlhbGx5IGZp bmQgYXMgd2VsbCB1c2VmdWwgZ2FkZ2V0cyBpbnNpZGUgc2VjY29tcCBvciBhbnkgb3RoZXIgY29k ZQo+PiB0aGF0IGlzIGluc2lkZSB0aGUga2VybmVsLCBzbyBpdCdzIG5vdCBhIHN0cmljdCBuZWNl c3NpdHkgZWl0aGVyLgo+Pgo+Pj4+Pj4gZ2Fpbi4gSSdtIG9uIGJvYXJkIGZvciBkb2luZyBpdCwg SSBqdXN0IHdhbnQgdG8gYmUgY2FyZWZ1bC4gOikKPj4+Pj4KPj4+Pj4gQW5vdGhlciBvcHRpb24g bWlnaHQgYmUgdG8gcmVtb3ZlIGMvZUJQRiBmcm9tIHRoZSBlcXVhdGlvbiBhbGwgdG9nZXRoZXIu Cj4+Pj4+IGMvZUJQRiBhbGxvd3MgZmxleGliaWxpdHkgYW5kIHRoYXQgYWxtb3N0IGFsd2F5cyBj b21lcyBhdCB0aGUgY29zdCBvZgo+Pj4+PiBhZGRpdGlvbmFsIHNlY3VyaXR5IHJpc2suIFNlY2Nv bXAgaXMgZm9yIGVuaGFuY2VkIHNlY3VyaXR5IHllcz8gSG93IGFib3V0IGEKPj4+Pj4gbmV3IHNl Y2NvbXAgbW9kZSB0aGF0IHBhc3NlcyBpbiBzb21ldGhpbmcgbGlrZSBhIGJpdCB2ZWN0b3Igb3Ig aGFzaG1hcCBmb3IKPj4+Pj4gInNpbXBsZSIgd2hpdGUvYmxhY2sgbGlzdCBjaGVja3MgdmFsaWRh dGVkIGJ5IGtlcm5lbCBjb2RlLCB2ZXJzdXMgdXNlcgo+Pj4+PiBwcm92aWRlZCBpbnRlcnByZXRl ZCBjb2RlPyBPZiBjb3Vyc2UgdGhpcyByZW1vdmVzIGEgZmFpciBudW1iZXIgb2YgdGhpbmdzCj4+ Pj4+IHlvdSBjYW4gY3VycmVudGx5IGRvIG9yIHdvdWxkIGJlIGFibGUgdG8gZG8gd2l0aCBlQlBG LiBPZiBjb3Vyc2UsIHJlc3RhdGVkCj4+Pj4+IGZyb20gYSBzZWN1cml0eSBwb2ludCBvZiB2aWV3 LCB0aGlzIHJlbW92ZXMgYSBmYWlyIG51bWJlciBvZiB0aGluZ3MgYW4KPj4+Pj4gX2F0dGFja2Vy XyBjYW4gZG8uIFByZXN1bWFibHkgdGhlIHBlcmZvcm1hbmNlIGltcHJvdmVtZW50IHdvdWxkIGFs c28gYmUKPj4+Pj4gc2lnbmlmaWNhbnQuCj4+Cj4+IEdvb2QgbHVjayB3aXRoIG5vdCBicmVha2lu ZyBleGlzdGluZyBhcHBsaWNhdGlvbnMgcmVseWluZyBvbiBzZWNjb21wIG91dAo+PiB0aGVyZS4K PiAKPiBUaGlzIHdhc24ndCBpbiB0aGUgY29udGV4dCBvZiBhbiBpbXBsZW1lbnRhdGlvbiBwcm9w b3NhbCwgYnV0IHRoZSBhc3N1bXB0aW9uIHdvdWxkIGJlIHRvIGFkZCB0aGlzIGluIGFkZGl0aW9u IHRvIHRoZSBvbGQgCj4gd2F5LiBOb3csIGRvZXMgdGhhdCBtYWtlIHNlbnNlIHRvIGRvPyBUaGF0 IGlzIHRoZSBkaXNjdXNzaW9uLgo+IAo+Pgo+Pj4+PiBJcyB0aGlzIGFuIGlkZWEgd29ydGggcHJv dG90eXBpbmc/Cj4+Pj4KPj4+PiBUaGF0IHdhcyB0aGUgb3JpZ2luYWwgcHJvdG90eXBlIGZvciBz ZWNjb21wLWZpbHRlci4gOikgVGhlIGRpc2N1c3Npb24KPj4+PiBhcm91bmQgdGhhdCBmcm9tIHll YXJzIGFnbyBiYXNpY2FsbHkgYm9pbGVkIGRvd24gdG8gaXQgYmVpbmcKPj4+PiBpbmZsZXhpYmxl LiBHaXZlbiBhbGwgdGhlIHRoaW5ncyBwZW9wbGUgd2FudCB0byBkbyBhdCBzeXNjYWxsIHRpbWUs Cj4+Pj4gdGhhdCBjb250aW51ZXMgdG8gYmUgdHJ1ZS4gU28gdHJ1ZSwgaW4gZmFjdCwgdGhhdCBo ZXJlIHdlIGFyZSBub3csCj4+Pj4gdHJ5aW5nIHRvIG1vdmUgdG8gZUJQRiBmcm9tIGNCUEYuIDsp Cj4+Cj4+IFJpZ2h0LCBhZ3JlZS4gY0JQRiBpcyBhbHNvIHByZXR0eSBtdWNoIGZyb3plbiB0aGVz ZSBkYXlzIGFuZCBhc2lkZSBmcm9tCj4+IHRoYXQsIHNlY2NvbXAvQlBGIGFsc28ganVzdCB1c2Vz IGEgcHJvcGVyIHN1YnNldCBvZiBpdC4gSSB3b3VsZG4ndCBtaW5kCj4+IGRvaW5nIHNvbWV0aGlu ZyBzaW1pbGFyIGZvciBlQlBGIHNpZGUgYXMgbG9uZyBhcyB0aGlzIGlzIHJlYXNvbmFibHkKPj4g bWFpbnRhaW5hYmxlIGFuZCBub3QgbWFraW5nIEJQRiBjb3JlIG1vcmUgY29tcGxleCwgYnV0IG1v c3Qgb2YgaXQgY2FuCj4+IGFscmVhZHkgYmUgc2V0IGluIHRoZSB2ZXJpZmllciBhbnl3YXkgYmFz ZWQgb24gcHJvZyB0eXBlLiBOb3RlLCB0aGF0Cj4+IHBlcmZvcm1hbmNlIG9mIHNlY2NvbXAvQlBG IGlzIGRlZmluaXRlbHkgYSBkZW1hbmQgYXMgd2VsbCB3aGljaCBpcyB3aHkKPj4gcGVvcGxlIHN0 aWxsIGV4dGVuZCB0aGUgb2xkIHJlbWFpbmluZyBjQlBGIEpJVHMgdG9kYXkgc3VjaCB0aGF0IGl0 IGNhbgo+PiBiZSBKSVRlZCBhbHNvIGZyb20gdGhlcmUuCj4+Cj4+PiBJIHdpbGwgdHJ5IHRvIGZp bmQgdGhhdCBkaXNjdXNzaW9uLiBBcyBzb21lb25lIHBvaW50ZWQgb3V0IGhlcmUgdGhvdWdoLCBl QlBGIGlzIGJlaW5nIHVzZWQgYnkgbW9yZSBhbmQgbW9yZSBwZW9wbGUgaW4gCj4+PiBhcmVhcyB3 aGVyZSBzZWN1cml0eSBpcyBub3QgdGhlIHByaW1hcnkgY29uY2Vybi4gRGlmZmVyaW5nIG9iamVj dGl2ZXMgd2lsbCBtYWtlIHRoaXMgYSBsb25nIHRlcm0gY29udGludWluZyBpc3N1ZS4gV2UgCj4+ PiBvdXJzZWx2ZXMgd2VyZSBsb29raW5nIGF0IGVCUEYgc2ltcGx5IGFzIGEgbWVhbnMgdG8gdXNl IGEgaGFzaG1hcCBmb3IgYSB3aGl0ZS9ibGFja2xpc3QsIGkuZS4gcGVyZm9ybWFuY2Ugbm90IAo+ Pj4gZmxleGliaWxpdHkuCj4+Cj4+IE5vdCByZWFsbHksIHNlY3VyaXR5IG9mIHZlcmlmaWVyIGFu ZCBCUEYgaW5mcmEgaW4gZ2VuZXJhbCBpcyBvbiB0aGUgdG9wCj4+IG9mIHRoZSBsaXN0LCBpdCdz IGZ1bmRhbWVudGFsIHRvIHRoZSB1bmRlcmx5aW5nIGNvbmNlcHQgYW5kIGp1c3QgYmVjYXVzZQo+ PiBpdCBpcyBoZWF2aWx5IHVzZWQgYWxzbyBpbiB0cmFjaW5nIGFuZCBuZXR3b3JraW5nLCBpdCBv bmx5IHNob3dzIHRoYXQgdGhlCj4+IGNvbmNlcHQgaXMgaGlnaGx5IGZsZXhpYmxlIHRoYXQgaXQg Y2FuIGJlIGFwcGxpZWQgaW4gbXVsdGlwbGUgYXJlYXMuCgpJZiB5b3UncmUgaW1wbHlpbmcgdGhh dCBiZWNhdXNlIHNlY2NvbXAgd291bGQgaGF2ZSBpdCdzIG93biB2ZXJpZmllciBhbmQgY291bGQg dGhlcmVmb3JlIHJlc3RyaWN0IGl0c2VsZiB0byBhIHN1YnNldCBvZiAKZUJQRiwgdGhlcmVmb3Jl IGFueSBmdXR1cmUgYWRkaXRpb25zL2ZlYXR1cmVzIHRvIGVCUEYgd291bGQgbm90IG5lY2Vzc2Fy aWx5IG1ha2Ugc2VjY29tcCBsZXNzIHNlY3VyZSwgSSBtYWlubHkgYWdyZWUuIElzIAp0aGF0IHRo ZSBhcmd1bWVudD8KCi1jaHJpc2gKCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18KQ29udGFpbmVycyBtYWlsaW5nIGxpc3QKQ29udGFpbmVyc0BsaXN0cy5s aW51eC1mb3VuZGF0aW9uLm9yZwpodHRwczovL2xpc3RzLmxpbnV4Zm91bmRhdGlvbi5vcmcvbWFp bG1hbi9saXN0aW5mby9jb250YWluZXJz