On 12/12/2025 05:00, Jinjie Ruan wrote:

On 2025/12/9 21:46, Kevin Brodsky wrote:

quoted

On 04/12/2025 09:21, Jinjie Ruan wrote:

quoted

The generic entry abort the syscall_trace_enter() sequence if
ptrace_report_syscall_entry() errors out, but arm64 not.

As the ptrace_report_syscall_entry() comment said, the calling arch code
should abort the system call and must prevent normal entry so no system
call is made if ptrace_report_syscall_entry() return nonzero.

This patch is now in the right position, which means that arm64 does
abort the syscall already without this patch. What we're changing here
is that the tracing sequence is interrupted. The comment you're
referring to says nothing about tracing so I'm not sure it helps to
refer to it.

I think “must prevent normal entry ”means When ptrace requests
interception, all subsequent processing, including audit and seccomp,
should completely bypassed.

Fair enough, let's just make sure the commit message doesn't imply that
arm64 performs a syscall before this patch.

- Kevin