Re: seccomp filter for dovecot

On 06.10.2017 12:15, Aki Tuomi wrote:

On 06.10.2017 00:21, Phoenix Krypt wrote:

...

Hi,

I would like to contribute to dovecot by adding seccomp system call filtering.

Is this something you would like to merge into the dovecot codebase? If so, I can put up a PR on github once I complete it.

Thanks, Archana What would this achieve?

Aki

Also if you do implement this, it should go under service declaration and used whenever a process is spawned.

service whatever { seccomp_filter = list of caps }

Aki