Subject: Re: RFC: Network privilege separation.

From: Rémi Denis-Courmont <[email-masked]>
Date: Mon, 12 Jan 2009 22:47:21 +0200

Le lundi 12 janvier 2009 22:55:47 Andi Kleen, vous avez écrit :
> Fair point, although I'm afraid you didn't do a very good
> job explaining your reasons, so it sounds like a
> quite arbitary decision.

Fair enough. It's just way too much interface/adaptation work compared to the 
benefit. Especially considering that it would be much easier, and almost as 
secure, with a "relaxed" SECCOMP. And on top of that, it's causing 
unnecessary overhead (we're also interested in those small Linux-based 
handsets that aren't as fast and power-hungry as desktop PCs).

-- 
Rémi Denis-Courmont
http://www.remlab.net/