seccomp filter for dovecot

[Aki Tuomi]

On 06.10.2017 12:15, Aki Tuomi wrote:
>
> On 06.10.2017 00:21, Phoenix Krypt wrote:
>> Hi,
>>
>> I would like to contribute to dovecot by adding seccomp system call
>> filtering.
>>
>> Is this something you would like to merge into the dovecot codebase? If so,
>> I can put up a PR on github once I complete it.
>>
>> Thanks,
>> Archana
> What would this achieve?
>
> Aki
Also if you do implement this, it should go under service declaration
and used whenever a process is spawned.

service whatever {
   seccomp_filter = list of caps
}

Aki