Re: [RFC PATCH 2/2] seccomp: defer syscall_rollback() to get_signal()
From: Kees Cook
Date: Wed Apr 15 2026 - 11:50:57 EST
On Tue, Apr 14, 2026 at 07:41:39PM +0200, Oleg Nesterov wrote:
> Yes sure. but do you agree with this RFC approach?
I like it so far; I'm going to run the rr regression tests to
double-check.
> See also 0/2. Perhaps SYSCALL_WORK_SYSCALL_XXX makes more sense?
This _feels_ like a more complex solution, but I'll study it more.
> And just in case... I ran tools/testing/selftests/seccomp/seccomp_bpf, it
> doesn't show any regression.
Great!
--
Kees Cook