Re: [PATCH perf/core 20/22] seccomp: passthrough uprobe systemcall without filtering

Kees Cook
2025-04-21T23:05:00Z

On Mon, Apr 21, 2025 at 11:44:20PM +0200, Jiri Olsa wrote:
> Adding uprobe as another exception to the seccomp filter alongside
> with the uretprobe syscall.
>
> Same as the uretprobe the uprobe syscall is installed by kernel as
> replacement for the breakpoint exception and is limited to x86_64
> arch and isn't expected to ever be supported in i386.
>
> Cc: Kees Cook <keescook@chromium.org>
> Cc: Eyal Birger <eyal.birger@gmail.com>
> Signed-off-by: Jiri Olsa <jolsa@kernel.org>

<insert standard grumbling>

Going forward, how can we avoid this kind of thing?

Reviewed-by: Kees Cook <kees@kernel.org>

--
Kees Cook