Re: Can we block splice syscall?

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------8nT3NZOrZpr0t6QkG8zVenJp
Content-Type: multipart/mixed; boundary="------------q6JpGNPPKjW1MT6smapUE97a";
 protected-headers="v1"
From: Javier Martinez <[email protected]>
To: [email protected]
Message-ID: <181675d4-2c55-42ae-bbe1-b6c7dc47e851-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Subject: Re: [gentoo-hardened] Can we block splice syscall?
References: <CAJPBRYNiNBGTTM3jV9h_RzdfvUusXS_Je+Vj3DGvNJOmW+6=RA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
In-Reply-To: <CAJPBRYNiNBGTTM3jV9h_RzdfvUusXS_Je+Vj3DGvNJOmW+6=RA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>

--------------q6JpGNPPKjW1MT6smapUE97a
Content-Type: multipart/mixed; boundary="------------0HocThHYBzAYenyZ4c03CMDa"

--------------0HocThHYBzAYenyZ4c03CMDa
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64

RWwgOS81LzI2IGEgbGFzIDE1OjQwLCBNaWNoZWwgQXJib2kgZXNjcmliacOzOg0KPiBDb25z
aWRlcmluZyB0aGF0ICJkaXJ0eSBmcmFnIiBhbmQgImNvcHkgZmFpbCIgYXJlIHByb2JhYmx5
IGp1c3QgdGhlDQo+IGJlZ2lubmluZywgYW5kIHNwbGljZSBpcyBhIExpbnV4IHNwZWNpZmlj
IHN5c2NhbGwgd2hpY2gganVzdA0KPiBlbmhhbmNlcyBwZXJmb3JtYW5jZSwgbm8gbmV3IGZ1
bmN0aW9uIHBlciBzZSwgY291bGQgd2UganVzdCBkaXNhYmxlIGl0DQo+IHNvbWVob3c/DQo+
IFRoZXJlIGlzIG5vIHN5c2N0bCBmb3IgdGhhdCAobGlrZSBpb191cmluZyksIHNlY2NvbXAg
Y2Fubm90IGJlIGFwcGxpZWQNCj4gZ2xvYmFsbHksIGl0IGlzIG5vdCBwb3NzaWJsZSB0byBi
bG9jayBzcGxpY2UoKSBkaXJlY3RseSB3aXRoIEFwcEFybW9yIG9yDQo+IFNFTGludXgsIGJs
b2NraW5nIGFjY2Vzc2VzIHRvIHBpcGVzIGdsb2JhbGx5IHdvdWxkIHJlbmRlciB0aGUgT1Mg
dW51c2FibGUuLi4NCj4gRG8gd2UgaGF2ZSB0byB3cml0ZSBhIGRlZGljYXRlZCBMU00/DQo+
IA0KDQppbmNsdWRlL2dlbmVyYXRlZC9hc20vc3lzY2FsbHNfeDMyLmg6X19TWVNDQUxMKDI3
NSwgc3lzX3NwbGljZSkNCmluY2x1ZGUvZ2VuZXJhdGVkL2FzbS9zeXNjYWxsc194MzIuaDpf
X1NZU0NBTEwoNTMyLCBzeXNfdm1zcGxpY2UpDQoNCk1heWJlIHlvdSBjYW4gdHJ5IHRvIGRp
c2FibGUgdGhlbSBpbiB5b3VyIGFyY2ggYXQga2VybmVsIGxldmVsLCBzb2Z0d2FyZSANCnRo
YXQgY291bGxkIHRyeSB0byB1c2UgaXQgc3VyZWx5IHdpbGwgcmVjZWl2ZSBvbmUgZnVuY3Rp
b24gbm90IA0KaW1wbGVtZW50ZWQgKEEuSy5BIEVOT1NZUykNCg0KTWF5YmUgeW91IGNvdWxk
IGVkaXQgdW5pc3RkLmggZm9yIHlvdXIgYXJjaCByZW1vdmUgdGhlbSBvciBhbHNvIHlvdSBj
YW4gDQpjaGVjayB5b3VyIGtlcm5lbCBjb25maWcgYW5kIGRpc2FibGUgdGhlIENPTkZJRyBy
ZWxhdGVkIHdpdGggYm90aCANCnZ1bG5lcmFiaWxpdGllcyBhcyBhIHdvcmthcm91bmQuDQoN
CmFzDQoNCkNPTkZJR19DUllQVE9fVVNFUl9BUElfQUVBRA0KDQphbmQNCg0KQ09ORklHX0lO
RVQ2X0VTUCBpbmNsdWRpbmcgQ09ORklHX0lORVRfRVNQDQo=
--------------0HocThHYBzAYenyZ4c03CMDa
Content-Type: application/pgp-keys; name="OpenPGP_0x57E64E0B7FC3BEDF.asc"
Content-Disposition: attachment; filename="OpenPGP_0x57E64E0B7FC3BEDF.asc"
Content-Description: OpenPGP public key
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP PUBLIC KEY BLOCK-----
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3D
=3DQ8sa
-----END PGP PUBLIC KEY BLOCK-----

--------------0HocThHYBzAYenyZ4c03CMDa--

--------------q6JpGNPPKjW1MT6smapUE97a--

--------------8nT3NZOrZpr0t6QkG8zVenJp
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=SHLN
-----END PGP SIGNATURE-----

--------------8nT3NZOrZpr0t6QkG8zVenJp--