Re: [PATCH] seccomp: passthrough uretprobe systemcall without filtering
From: Kees Cook
Date: Mon Jan 20 2025 - 16:34:53 EST
On Sat, Jan 18, 2025 at 07:39:25PM -0800, Eyal Birger wrote:
> Alternatively, maybe this syscall implementation should be reverted?
Honestly, that seems the best choice. I don't think any thought was
given to how it would interact with syscall interposers (including
ptrace, strict mode seccomp, etc).
--
Kees Cook