@kees_cook @grsecurity FWIW, recent libseccomp releases prevent this by using the arch token *and* the syscall number to validate the ABI.
@grsecurity like most filters blacklisting isn't advised. that said, it'd be nice if seccomp auto-blacklisted mismatched arch syscall ranges
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.