Hey, On Fri, Nov 02, 2012 at 08:18:24PM +0000, Alan Cox wrote: > a - there are lots of cases you want to allow only a subset of commands.
Care to spell them out. At least the cases Paolo listed should be served by what's described. > b - if you are using a BPF filter which is the obvious way to do it then > the flexibility comes for free without any extra complexity as the kernel > provides a generic implementation, and even a JIT for complex cases. Yeah, sure, but it's all about what tool to use where and maybe it's my ignorance about the problem space but it's difficult for me to believe that we need full-blown BPF filter here when this is the only activity we've got in a decade. Thanks. -- tejun -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/