Tag
toctou
- Nov 22, 2024 Reference Monitors and Complete Mediation in Access Control Why an access check only means something if every access passes through it, how the policy decision point is separated from the enforcement point, and where check-then-use gaps appear. security
- Jul 20, 2024 Why a Seccomp Filter Cannot Inspect Syscall Arguments in Memory The pointer-versus-contents problem in syscall filtering, the race that makes dereferencing unsafe even if it were allowed, and the mechanisms that recover argument-aware policy without it. virtualization