Re: [PATCH v10 3/4] seccomp: add a return code to trap to userspace

On Sun, Dec 9, 2018 at 10:24 AM Tycho Andersen wrote: > > This patch introduces a means for syscalls matched in seccomp to notify > some other task that a particular filter has been triggered. > > The motivation for this is primarily for use with containers. For example, > if a container does an i

[PATCH v10 3/4] seccomp: add a return code to trap to userspace

This patch introduces a means for syscalls matched in seccomp to notify some other task that a particular filter has been triggered. The motivation for this is primarily for use with containers. For example, if a container does an init_module(), we obviously don't want to load this untrusted code,