Merge branch 'master' of ssh://gapil.gnulinux.it/srv/git/gapil
[gapil.git] / procadv.tex
index 41060f09e17d4f5a25a6954b3b20a1ba76e28d4e..fa799fb7c46e870f1969320bfd8a5105c898b5eb 100644 (file)
@@ -573,7 +573,8 @@ opportuno dettagliare maggiormente.
 \end{table}
 
 % TODO: verificare ed aggiungere le nuove capacità CAP_BPF, CAP_PERFMON, vedi
-% https://lwn.net/Articles/822362/ 
+% https://lwn.net/Articles/822362/ anche CAP_CHECKPOINT_RESTORE vedi
+% https://lwn.net/Articles/822362/ e https://git.kernel.org/linus/74858abbb103
 
 \constbeg{CAP\_SETPCAP}
 
@@ -1376,6 +1377,8 @@ il codice non fidato.
 % sempre per seccomp vedi https://lwn.net/Articles/799557/ dal 5.11 supporto
 % per le constant-action bitmaps https://lwn.net/Articles/834785/
 
+% TODO un esempio di uso di seccomp è su
+% https://blog.cloudflare.com/sandboxing-in-linux-with-zero-lines-of-code/
 
 \itindend{secure~computing~mode}