Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S262687AbVAVTnA (ORCPT ); Sat, 22 Jan 2005 14:43:00 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262697AbVAVTnA (ORCPT ); Sat, 22 Jan 2005 14:43:00 -0500 Received: from gprs214-39.eurotel.cz ([160.218.214.39]:46755 "EHLO amd.ucw.cz") by vger.kernel.org with ESMTP id S262687AbVAVTm6 (ORCPT ); Sat, 22 Jan 2005 14:42:58 -0500 Date: Sat, 22 Jan 2005 20:42:42 +0100 From: Pavel Machek To: Andrea Arcangeli Cc: Ingo Molnar , Chris Wright , Rik van Riel , Andrew Morton , linux-kernel@vger.kernel.org Subject: Re: seccomp for 2.6.11-rc1-bk8 Message-ID: <20050122194242.GB21719@elf.ucw.cz> References: <20050121100606.GB8042@dualathlon.random> <20050121120325.GA2934@elte.hu> <20050121093902.O469@build.pdx.osdl.net> <20050121105001.A24171@build.pdx.osdl.net> <20050121195522.GA14982@elte.hu> <20050121203425.GB11112@dualathlon.random> <20050122103242.GC9357@elf.ucw.cz> <20050122172542.GF7587@dualathlon.random> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050122172542.GF7587@dualathlon.random> X-Warning: Reading this can be dangerous to your mental health. User-Agent: Mutt/1.5.6+20040907i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1138 Lines: 24 Hi! > > Well, seccomp is also getting very little testing, when ptrace gets a > > lot of testing; I know that seccomp is simple, but I believe testing > > coverage still make ptrace better choice. > > It's not testing that makes code more secure. Testing verifys the code > works in production, but testing almost never helps to find security > issues, and often not even hidden subtle race conditions. Check how many > security bugs have been found with testing. Just go to bugtraq count > them. I simply cannot relay on testing for the security part. I will > relay on testing for everything else but not for this. Well, then you can help auditing ptrace()... It is probably also true that more people audited ptrace() than seccomp :-). Pavel -- People were complaining that M$ turns users into beta-testers... ...jr ghea gurz vagb qrirybcref, naq gurl frrz gb yvxr vg gung jnl! - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/