Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature request]: Disable io_uring by default #5447

Open
2 tasks done
DemiMarie opened this issue Jun 19, 2023 · 1 comment
Open
2 tasks done

[Feature request]: Disable io_uring by default #5447

DemiMarie opened this issue Jun 19, 2023 · 1 comment

Comments

@DemiMarie
Copy link

Checklist

  • I agree to follow the Code of Conduct that this project adheres to.
  • I have searched the issue tracker for a feature request that matches the one I want to file, without success.

Suggestion

Google found that io_uring is a major source of security vulnerabilities in Linux. Therefore, they are disabling it in Android and ChromiumOS. Flatpak should do the same and block io_uring via the default seccomp filter. I expect this to have very little compatibility impact because io_uring is quite new and (I believe) mostly used in servers.

@Erick555
Copy link
Contributor

Perhaps sending PR which implements this in existing seccomp blocklist would bring more attention from maintainers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants