droproot, seccomp

[Hal Murray]

esr at thyrsus.com said:
> 46 to 55.  If just 9 syscalls are the difference, the very slightly reduced
> assurance starts to look like a reasonable trade to make the whole problem go
> away. 

That was comparing 2 lists from the same distro+version, just different 
hardware platforms, so I'd expect them to be very close.

The one-big-list is the technique we are currently using.  The current list 
has 96 slots.


-- 
These are my opinions.  I hate spam.