secure computing · Supported

Maintainers

• M Kees Cook <kees@kernel.org>
• R Andy Lutomirski <luto@amacapital.net>
• R Will Drewry <wad@chromium.org>

Paths

• F Documentation/userspace-api/seccomp_filter.rst
• F include/linux/seccomp.h
• F include/uapi/linux/seccomp.h
• F kernel/seccomp.c
• F tools/testing/selftests/kselftest_harness.h
• F tools/testing/selftests/kselftest_harness/
• F tools/testing/selftests/seccomp/*

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-api (capped at 30), ordered by date desc.

• STALE517d LANDED [PATCH v3 1/2] seccomp: passthrough uretprobe systemcall without filtering
  2025-02-02 · Eyal Birger <hidden>
• STALE523d LANDED [PATCH v2] seccomp: passthrough uretprobe systemcall without filtering
  2025-01-28 · Eyal Birger <hidden>
• STALE529d [PATCH] seccomp: passthrough uretprobe systemcall without filtering
  2025-01-17 · Eyal Birger <hidden>
• STALE539d Re: Crash when attaching uretprobes to processes running in Docker
  2025-01-15 · Eyal Birger <hidden>
• STALE2111d [PATCH 4/6] seccomp: Emulate basic filters for constant action results
  2020-09-23 · Kees Cook <hidden>
• STALE2111d [PATCH 3/6] seccomp: Implement constant action bitmaps
  2020-09-23 · Kees Cook <hidden>
• STALE2111d [PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE
  2020-09-23 · Kees Cook <hidden>
• STALE2111d [PATCH 6/6] [DEBUG] seccomp: Report bitmap coverage ranges
  2020-09-23 · Kees Cook <hidden>
• STALE2117d [PATCH v6 1/9] kernel: Support TIF_SYSCALL_INTERCEPT flag
  2020-09-04 · Gabriel Krisman Bertazi <hidden>
• STALE2159d [PATCH v5 1/9] kernel: Support TIF_SYSCALL_INTERCEPT flag
  2020-08-10 · Gabriel Krisman Bertazi <hidden>
• STALE2159d REVIEWED: 1 (0M) [PATCH v7 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing
  2020-07-23 · Mickaël Salaün <mic@digikod.net>
• STALE2179d REVIEWED: 1 (0M) [PATCH v6 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing
  2020-07-14 · Mickaël Salaün <mic@digikod.net>
• STALE2163d [PATCH v7 8/9] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-07-09 · Kees Cook <hidden>
• STALE2192d [PATCH v6.1 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-07-09 · Kees Cook <hidden>
• STALE2192d [PATCH v6 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-07-06 · Kees Cook <hidden>
• STALE2195d [PATCH v5 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-06-17 · Kees Cook <hidden>
• STALE2214d [PATCH 2/8] seccomp: Use pr_fmt
  2020-06-16 · Kees Cook <hidden>
• STALE2214d [PATCH 3/8] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE
  2020-06-16 · Kees Cook <hidden>
• STALE2214d [PATCH 4/8] seccomp: Implement constant action bitmaps
  2020-06-16 · Kees Cook <hidden>
• STALE2214d [PATCH 8/8] [DEBUG] seccomp: Report bitmap coverage ranges
  2020-06-16 · Kees Cook <hidden>
• STALE2213d [PATCH v4 11/11] seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID
  2020-06-16 · Kees Cook <hidden>
• STALE2213d [PATCH v4 06/11] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-06-16 · Kees Cook <hidden>
• STALE2213d [PATCH v4 10/11] seccomp: Switch addfd to Extensible Argument ioctl
  2020-06-16 · Kees Cook <hidden>
• STALE2216d [RFC PATCH] seccomp: Add extensibility mechanism to read notifications
  2020-06-13 · Sargun Dhillon <hidden>
• STALE2217d LANDED [PATCH v3 3/4] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-06-03 · Sargun Dhillon <hidden>
• STALE2214d LANDED: 2 (0M) [PATCH v3] seccomp: Add find_notification helper
  2020-06-01 · Sargun Dhillon <hidden>
• STALE2230d [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-05-28 · Sargun Dhillon <hidden>
• STALE2230d [PATCH v2 1/3] seccomp: Add find_notification helper
  2020-05-28 · Sargun Dhillon <hidden>
• STALE2237d [PATCH 4/5] seccomp: Add SECCOMP_ADDFD_FLAG_MOVE flag to add fd ioctl
  2020-05-24 · Sargun Dhillon <hidden>
• STALE2237d [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier
  2020-05-24 · Sargun Dhillon <hidden>