CODEWITHSUNDEEP
linuxsandboxseccomp
Melab
Melab

Reputation: 2852

Apply seccomp filter without hobbling spawning process

Suppose we have a program spawner that is used to launch other programs with a seccomp filter. If one wants to deny the use of execve in app, could this be achieved by applying the filter to a thread within spawner and then spawner execves into app with the filter applied to app? If that won't work, then is there some other way that would?

Upvotes: 2

Views: 29

Answers (0)

Related Questions