A sysctl to disable splice vmsplice and tee syscalls

Vengeur Masqué <[email protected]> Thu, 21 May 2026 17:52:07 +0200
Newsgroups gmane.linux.gentoo.security
Message-ID <CANfbZjJbJF13JCox3UuMMuAXkx9U0G7zsKXw8iVx7n9fAALLww@mail.gmail.com>
Hello,
I posted a patch a while ago on the forum, maybe not in the right section:
https://forums.gentoo.org/viewtopic.php?t=1177670

The Copy Fail rabbit hole went deeper than expected. If I am not
mistaken, few software use splice() as it is mainly an optimization
that is needed for very high data throughput.
Wouldn't most sysadmins feel safer without it?

I heard about the proposed "kill switch" in the Linux kernel but it
hash not made its way in the main kernel sources yet. This little
patch will probably be useless when it does.