logoalt Hacker News

guentherttoday at 10:04 AM1 replyview on HN

While this is an interesting project, I found following grating:

"Permissions without root

You don’t need root. Grant capabilities to SBCL:

sudo setcap cap_bpf,cap_perfmon+ep /usr/bin/sbcl

Now sbcl --load my-bpf-program.lisp works as your regular user. Tracepoint format files need chmod a+r to allow non-root compilation with deftracepoint."

That's obviously not ideal. Better might be to create a purpose-built image. Unlike perl, sbcl doesn't even pretend to care about security. Taint mode extension for sbcl, anybody?


Replies

phoe-krktoday at 10:19 AM

> Unlike perl, sbcl doesn't even pretend to care about security.

Mind expanding? What particular stuff does Perl have in terms of security here?

show 1 reply