Re: Crash when attaching uretprobes to processes running in Docker
flat view
From: Oleg Nesterov <oleg@redhat.com>
Date: 2025-01-14 17:26:02
Also in:
bpf, linux-trace-kernel, lkml
On 01/14, Jiri Olsa wrote:
ugh.. could we just 'disable' uretprobe trampoline when seccomp gets enabled? overwrite first byte with int3.. and similarly check on seccomp when installing uretprobe and switch to int3
Sorry, I don't understand... What exactly we can do? Aside from checking IS_ENABLED(CONFIG_SECCOMP) in arch_uprobe_trampoline() ? Oleg.