Re: [PATCH] seccomp: passthrough uretprobe systemcall without filtering

From: Kees Cook
Date: Mon Jan 20 2025 - 16:34:53 EST


On Sat, Jan 18, 2025 at 07:39:25PM -0800, Eyal Birger wrote:
> Alternatively, maybe this syscall implementation should be reverted?

Honestly, that seems the best choice. I don't think any thought was
given to how it would interact with syscall interposers (including
ptrace, strict mode seccomp, etc).

--
Kees Cook