pinning all system calls

Author:
Source

Sponsored:

Atlas of AI: Power, Politics, and the Planetary Costs of Artificial Intelligence - Audiobook


Uncover the true cost of artificial intelligence.

Listen now, and see the system behind the screens before the future listens to you. = > Atlas of AI $0.00 with trial. Read by Larissa Gallagher


Theo de Raadt (deraadt@)
posted
to tech@ regarding restrictions on the
addresses from which system calls can be made.

In addition to providing background,
the post contains information (and a patch)
for an imminent change – the introduction of a new
syscall,
pinsyscalls(2)
[link not working at the time of writing because change not yet committed],
which specifies the addresses from which individual
system calls are permitted.

pinsyscalls(2) will be called only from
the shared library linker,
ld.so(1).

Read more