Re: [PATCH][RFC] dynamic syscalls revisited

From: Kristian Sørensen
Date: Tue Nov 30 2004 - 14:36:58 EST


Steven Rostedt wrote:

On Mon, 2004-11-29 at 15:17 +0000, Christoph Hellwig wrote:


Actually they were dumped because dynamically syscalls are a really bad
idea, not because of implementation issues.




Yes, for most cases they are. But the implementation for them seemed to
be too intrusive for the special case. This solution is not so
intrusive, and can easily be compiled out. As I said, they are nice to
have for a quick debugging, and may have other uses as well. The times I
wished for them, was usually debugging a module and I didn't want to
recompile the kernel and reboot. So instead I made awful hacks into the
proc system or some make believe device to interface with.

I'm just putting this out for others to use. If it doesn't get into the
kernel, then so be it, but since this is not so intrusive, and can
easily be used on all architectures, then the patch can surely help
others.


In our project (The Umbrella Project) we are maintaining a system call for making a "restricted fork" (which could e.g. be that the child created will have no access to the network)... it is a very annoying job to keep the patch up to date with the new kernel versions because the syscall files are changed often. The rest of the Umbrella module is independent because it is based on LSM ... so having dynamic syscalls is definitly a wish of ours!


Best, Kristian Sørensen.

--
Kristian Sørensen
- The Umbrella Project -- Security for Consumer Electronics
http://umbrella.sourceforge.net

E-mail: ipqw@xxxxxxxxxxxx, Phone: +45 29723816

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/