Re: Crash when attaching uretprobes to processes running in Docker
From: Oleg Nesterov
Date: Tue Jan 14 2025 - 09:34:15 EST
On 01/14, Eyal Birger wrote:
>
> FWIW If I change the seccomp policy to SCMP_ACT_KILL this still fails.
Ah... I don't know what SCMP_ACT_KILL is, but indeed, in general it is
not safe to even try to call sys_uretprobe() if it is filtered.
Say, __secure_computing(SECCOMP_MODE_STRICT)->__secure_computing_strict()
does do_exit(SIGKILL) :/
Oleg.