dovecot - Oct 2017 - seccomp filter for dovecot

Hi,

I would like to contribute to dovecot by adding seccomp system call
filtering.

Is this something you would like to merge into the dovecot codebase? If so,
I can put up a PR on github once I complete it.

Thanks,
Archana

On 06.10.2017 00:21, Phoenix Krypt wrote:
> Hi,
>
> I would like to contribute to dovecot by adding seccomp system call
> filtering.
>
> Is this something you would like to merge into the dovecot codebase? If so,
> I can put up a PR on github once I complete it.
>
> Thanks,
> Archana
What would this achieve?

Aki

On 06.10.2017 12:15, Aki Tuomi wrote:
>
> On 06.10.2017 00:21, Phoenix Krypt wrote:
>> Hi,
>>
>> I would like to contribute to dovecot by adding seccomp system call
>> filtering.
>>
>> Is this something you would like to merge into the dovecot codebase? If
so,
>> I can put up a PR on github once I complete it.
>>
>> Thanks,
>> Archana
> What would this achieve?
>
> Aki
Also if you do implement this, it should go under service declaration
and used whenever a process is spawned.

service whatever {
?? seccomp_filter = list of caps
}

Aki