Re: [PATCH 0/2] Begin auditing SECCOMP_RET_ERRNO return actions

From: Andy Lutomirski
Date: Tue Jan 03 2017 - 00:57:46 EST


On Mon, Jan 2, 2017 at 8:53 AM, Tyler Hicks <tyhicks@xxxxxxxxxxxxx> wrote:
> This patch set creates the basis for auditing information specific to a given
> seccomp return action and then starts auditing SECCOMP_RET_ERRNO return
> actions. The audit messages for SECCOMP_RET_ERRNO return actions include the
> errno value that will be returned to userspace.
>

Not that I'm opposed to the idea, but what's the intended purpose?