On Wed, Feb 26, 2014 at 04:28:43AM +0000, Shawn Routhier via RT wrote: > On Mon Feb 24 12:51:27 2014, logan@elandsys.com wrote: > > > > > I saw that DHCP 4.3.0 was released. I would like to know if there is > > interest in the sandboxing patch for the next release of ISC-dhcpd. > > > > I've made further improvements to it. > > > > We are interested in it, but I have been allowing the Bind9 team to work on and > review the version of it you did for Bind9. After they complete their effort we > shall evaluate it and probably include something similar in DHCP. I would like > the two of them to use a similar style to allow for slightly easier updating in > the future. Hi Shawn, I've put the finishing touches to the bind-seccomp patch. Evan is going to review it. > > I do have some concerns about how difficult it will be to keep the code up to > date, but believe if the patch is written to require the admin to enable it at > configuration or run time it should be acceptable. > I've modified the configure.in code in bind to have better suppor for detection of seccomp. Would you be interested in a similar addition for the dhcpd-seccomp sandbox patch ?