Hacker News Reader

And which single syscall might be exploitable? I don't wanna wait until after an exploit to disable it

Nothing stops you from disabling everything you don’t need and now io_uring offers that per OP too.

I don’t get what you mean, in the past it was all or nothing, now you can disable every single operation selectively.

Gotta read the usual sources to find out what you gotta disable on your machines, like you have to for every single syscall since forever.

I mean exactly what I said. How do I know which parts of io_uring won't have security vulnerabilities discovered in the future?

Yes, but what parts of io_uring are safe to not disable?