Skip to contentSkip to conversation

Documentation: SECCOMP_RET_INFO return value

PATCH Superseded Corey Bryant 1 participant 1 message Dec 18, 2012 Documentation

v1 of 2 Superseded Latest is v2 →

lore
Share & tools
lore
#0 lore raw

PATCH 2/3 Documentation: SECCOMP_RET_INFO return value

Adds documentation describing the SECCOMP_RET_INFO return value.

---
 Documentation/prctl/seccomp_filter.txt | 7 +++++++
 1 file changed, 7 insertions(+)
Documentation/prctl/seccomp_filter.txt +7 -0
index 1e469ef..ffddf9f 100644
@@ -49,6 +49,7 @@ CONFIG_HAVE_ARCH_SECCOMP_FILTER, then filters may be added as below:
 PR_SET_SECCOMP:
 	Now takes an additional argument which specifies a new filter
 	using a BPF program.
+
 	The BPF program will be executed over struct seccomp_data
 	reflecting the system call number, arguments, and other
 	metadata.  The BPF program must then return one of the
@@ -138,6 +139,12 @@ SECCOMP_RET_TRACE:
 	allow use of ptrace, even of other sandboxed processes, without
 	extreme care; ptracers can use this mechanism to escape.)
 
+SECCOMP_RET_INFO:
+	Results in a rate-limited informational kernel message that
+	includes the system call number, and the system call is
+	executed.  The message format is:
+	"seccomp: syscall=x", where x is the system call number.
+
 SECCOMP_RET_ALLOW:
 	Results in the system call being executed.
 
Signature · 1 line
1.7.11.7