dohqu8Zi | 9 years ago | on: Exploiting the Linux kernel via packet sockets
Thanks for the correction.
dohqu8Zi's comments
dohqu8Zi | 9 years ago | on: Exploiting the Linux kernel via packet sockets
BTW: Depending on the configuration you can create a new namespace within Docker to gain CAP_NET_RAW since namespaces can nest.
dohqu8Zi | 9 years ago | on: Exploiting the Linux kernel via packet sockets
No, Docker usually drops CAP_NET_RAW within the container. But you can change that and other container technologies definitely keep CAP_NET_RAW within the container.
dohqu8Zi | 9 years ago | on: Exploiting the Linux kernel via packet sockets
No.
Create a new user namespace and you have CAP_NET_RAW within your shiny new namespace.
dohqu8Zi | 9 years ago | on: Systemd: tmpfiles: R /dir/.* destroys root
The bug is already fixed and they have better things to do than messing with our trolling. :-)
dohqu8Zi | 9 years ago | on: WireGuard: Next Generation Secure Kernel Network Tunnel
I hope to see a mainline submission for public review of this soon.
dohqu8Zi | 9 years ago | on: OpenWrt and LEDE to re-merge
The majority of OpenWRT/LEDE patches are gross hacks that need a major rework or a completely different approach.
This is not the first patch of that kind.
dohqu8Zi | 9 years ago | on: Bus1 is the new Kdbus
Sadly, the author failed to read on the history of kdbus and AF_BUS.
Just using UNIX domain socks is not the solution. This is more or less what dbus currently does and has major issues with memory accounting and trusts.
dohqu8Zi | 9 years ago | on: Git 2.10 has been released
Original announcement with hipster mode off. ;)
http://marc.info/?l=git&m=147286906121492&w=2
dohqu8Zi | 9 years ago | on: Changes sshd port every 30 seconds, using Two Factor Auth to login
So, this is http://shimmer.sourceforge.net/ rewritten in go?
dohqu8Zi | 10 years ago | on: Meet LKL: Turn Linux Kernel into a Library
Only in corner cases you want to replace all syscalls to LKL calls. Often you need to call to the host as well.
Especially LKL itself needs...
dohqu8Zi | 10 years ago | on: Meet LKL: Turn Linux Kernel into a Library
Depends on the FUSE filesystem, but most of the time it is the kernel<->user copy process.
dohqu8Zi | 10 years ago | on: Meet LKL: Turn Linux Kernel into a Library
This does not make any sense.
As soon you issue any system call you will trigger a context switch.
So, eve without using FUSE and just using LKL as tool to extract your favorite filesystem it will face them.
But the context switches not the bottleneck in FUSE. Did you benchmark?
page 1