kafel
kafel copied to clipboard
Compressed syscall database with O(1) lookup
libkafel.so 5x smaller (x86_64, stripped): down to 88KiB from 440KiB.
Closes #20
@happyCoder92 Could you please take a look?
@happyCoder92
@happyCoder92 I'd like to discuss the overall direction before moving forward.
I am using Kafel in https://github.com/rapidlua/sandals, which is a lightweight sandbox similar to nsjail. Sandals are used in https://luajit.me for secure execution of user-submitted Lua code. Sandbox overhead as opposed to running a process unsandboxed is a mere 5ms.
I need access to syscall database so that the sandbox could produce a description of the syscall denied. I assume that other users might have similar needs.
My suggestion is to split the database into a separate library, say libsyscalldb.so
.
Spliting the syscall database into separate library sounds like a good idea. It should be however fairly small and easily embeddable.