On Wed, Jan 15, 2025 at 11:03 AM Oleg Nesterov [off-list ref] wrote:

On 01/15, Eyal Birger wrote:

quoted

--- a/kernel/seccomp.c
+++ b/kernel/seccomp.c

@@ -1359,6 +1359,9 @@ int __secure_computing(const struct seccomp_data *sd)
        this_syscall = sd ? sd->nr :
                syscall_get_nr(current, current_pt_regs());

+       if (this_syscall == __NR_uretprobe)
+               return 0;
+

Yes, this is what I meant. But we need the new arch-dependent helper.

Do you mean because __NR_uretprobe is not defined for other architectures?
Is there an existing helper? I wasn't able to find one...

If not, would it just make sense to just wrap this check in
#ifdef __NR_uretprobe ?

Eyal.

Oleg.