seccomp_unotify.2: User-space notification can't be used to implement security policy
commitbcfeed7d4eb38e4640633df86897d96cfb166dff
authorMichael Kerrisk <mtk.manpages@gmail.com>
Thu, 15 Oct 2020 10:27:33 +0000 (15 12:27 +0200)
committerMichael Kerrisk <mtk.manpages@gmail.com>
Wed, 9 Jun 2021 22:40:17 +0000 (10 10:40 +1200)
tree06b53a0f6a769961eed38d977211ac249607e5fd
parent03e42374096cb9830bb2f9f557044361e57bca37
seccomp_unotify.2: User-space notification can't be used to implement security policy

Add some strongly worded text warning the reader about the correct
uses of seccomp user-space notification.

Reported-by: Jann Horn <jannh@google.com>
Cowritten-by: Christian Brauner <christian@brauner.io>
Cowritten-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
man2/seccomp_unotify.2