Re: Crash when attaching uretprobes to processes running in Docker
From: Oleg Nesterov
Date: Tue Jan 14 2025 - 12:26:09 EST
On 01/14, Jiri Olsa wrote:
>
> ugh.. could we just 'disable' uretprobe trampoline when seccomp gets enabled?
> overwrite first byte with int3.. and similarly check on seccomp when installing
> uretprobe and switch to int3
Sorry, I don't understand... What exactly we can do? Aside from checking
IS_ENABLED(CONFIG_SECCOMP) in arch_uprobe_trampoline() ?
Oleg.