Re: [RFC PATCH 2/2] seccomp: defer syscall_rollback() to get_signal()

Kees Cook
2026-04-15T15:50:06Z

On Tue, Apr 14, 2026 at 07:41:39PM +0200, Oleg Nesterov wrote:
> Yes sure. but do you agree with this RFC approach?

I like it so far; I'm going to run the rr regression tests to
double-check.

> See also 0/2. Perhaps SYSCALL_WORK_SYSCALL_XXX makes more sense?

This _feels_ like a more complex solution, but I'll study it more.

> And just in case... I ran tools/testing/selftests/seccomp/seccomp_bpf, it
> doesn't show any regression.

Great!

--
Kees Cook