Re: [PATCH] seccomp: passthrough uretprobe systemcall without filtering

Kees Cook
2025-01-20T21:34:42Z

On Sat, Jan 18, 2025 at 07:39:25PM -0800, Eyal Birger wrote:
> Alternatively, maybe this syscall implementation should be reverted?

Honestly, that seems the best choice. I don't think any thought was
given to how it would interact with syscall interposers (including
ptrace, strict mode seccomp, etc).

--
Kees Cook