[PATCH v2 2/3] Documentation: SECCOMP_RET_INFO return value

From: Corey Bryant
Date: Mon Jan 07 2013 - 12:09:00 EST

Adds documentation describing the SECCOMP_RET_INFO return value.

Signed-off-by: Corey Bryant <coreyb@xxxxxxxxxxxxxxxxxx>
- Add arch to message (wad@xxxxxxxxxxxx)

Documentation/prctl/seccomp_filter.txt | 8 ++++++++
1 file changed, 8 insertions(+)

diff --git a/Documentation/prctl/seccomp_filter.txt b/Documentation/prctl/seccomp_filter.txt
index 1e469ef..88d6882 100644
--- a/Documentation/prctl/seccomp_filter.txt
+++ b/Documentation/prctl/seccomp_filter.txt
@@ -49,6 +49,7 @@ CONFIG_HAVE_ARCH_SECCOMP_FILTER, then filters may be added as below:
Now takes an additional argument which specifies a new filter
using a BPF program.
The BPF program will be executed over struct seccomp_data
reflecting the system call number, arguments, and other
metadata. The BPF program must then return one of the
@@ -138,6 +139,13 @@ SECCOMP_RET_TRACE:
allow use of ptrace, even of other sandboxed processes, without
extreme care; ptracers can use this mechanism to escape.)

+ Results in a rate-limited informational kernel message that
+ includes the system call number and architecture, and the
+ system call is executed. The message format is:
+ "seccomp: syscall=x, arch=y", where x is the system call number
+ and y is the architecture.
Results in the system call being executed.


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/