secure computing · Supported

Maintainers

• M Kees Cook <kees@kernel.org>
• R Andy Lutomirski <luto@amacapital.net>
• R Will Drewry <wad@chromium.org>

Paths

• F Documentation/userspace-api/seccomp_filter.rst
• F include/linux/seccomp.h
• F include/uapi/linux/seccomp.h
• F kernel/seccomp.c
• F tools/testing/selftests/kselftest_harness.h
• F tools/testing/selftests/kselftest_harness/
• F tools/testing/selftests/seccomp/*

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH RFC POC 00/50] file: handle files on syscall exit
  2026-09-15 11:36 · 1 reply in 7d · Christian Brauner <brauner@kernel.org>

Recent patches

Most-recent 30 patches in this subsystem on linux-arm-kernel (capped at 30), ordered by date desc.

• HOTtoday [PATCH RFC POC 39/50] seccomp: stop putting the listener descriptor back on failure
  2026-09-15 · Christian Brauner <brauner@kernel.org>
• STALE595d REVIEWED: 5 (3M) [PATCH v2] treewide: const qualify ctl_tables where applicable
  2025-01-10 · Joel Granados <joel.granados@kernel.org>
• STALE614d [PATCH] treewide: const qualify ctl_tables where applicable
  2025-01-09 · Joel Granados <joel.granados@kernel.org>
• STALE2123d Re: [arm64] kernel BUG at kernel/seccomp.c:1309!
  2020-11-23 · Arnd Bergmann <arnd@kernel.org>
• STALE2188d Re: [PATCH 00/15] selftests/seccomp: Refactor change_syscall()
  2020-09-15 · Michael Ellerman <mpe@ellerman.id.au>
• STALE2532d LANDED [PATCH v1] seccomp: simplify secure_computing()
  2019-09-24 · Christian Brauner <hidden>
• STALE2532d [PATCH] seccomp: remove unused arg from secure_computing()
  2019-09-20 · Christian Brauner <hidden>
• STALE2721d [PATCH 5/6 v3] syscalls: Remove start and number from syscall_get_arguments() args
  2019-04-01 · Steven Rostedt <rostedt@goodmis.org>
• STALE2727d [RFC][PATCH 3/4 v2] syscalls: Remove start and number from syscall_get_arguments() args
  2019-03-29 · Steven Rostedt <rostedt@goodmis.org>
• STALE2736d REVIEWED: 6 (5M) [PATCH v2 13/13] syscall_get_arch: add "struct task_struct *" argument
  2019-03-17 · Dmitry V. Levin <hidden>
• STALE2751d REVIEWED: 6 (5M) [PATCH 14/14] syscall_get_arch: add "struct task_struct *" argument
  2019-01-09 · Dmitry V. Levin <hidden>
• STALE2844d REVIEWED: 1 (0M) [PATCH v2 16/15 v2] syscall_get_arch: add "struct task_struct *" argument
  2018-11-21 · Dmitry V. Levin <hidden>
• STALE2844d [PATCH v2 16/15] syscall_get_arch: add "struct task_struct *" argument
  2018-11-21 · Dmitry V. Levin <hidden>
• STALE3746d [PATCH 02/14] seccomp: Add a seccomp_data parameter secure_computing()
  2016-06-09 · Kees Cook <hidden>
• STALE3746d [PATCH 04/14] seccomp: remove 2-phase API
  2016-06-09 · Kees Cook <hidden>
• STALE3746d [PATCH 05/14] seccomp: recheck the syscall after RET_TRACE
  2016-06-09 · Kees Cook <hidden>
• STALE3864d [PATCH 3/5] all: s390: redefine wrappers in generic code
  2016-01-25 · Yury Norov <hidden>
• STALE4239d Re: [PATCH v5 3/5] x86: Split syscall_trace_enter into two phases
  2015-02-06 · Kees Cook <hidden>
• STALE4426d [PATCH v3 3/8] seccomp: Allow arch code to provide seccomp_data
  2014-07-22 · Andy Lutomirski <luto@amacapital.net>
• STALE4426d [PATCH v3 2/8] seccomp: Refactor the filter callback and the API
  2014-07-22 · Andy Lutomirski <luto@amacapital.net>
• STALE4426d [PATCH v3 1/8] seccomp,x86,arm,mips,s390: Remove nr parameter from secure_computing
  2014-07-22 · Andy Lutomirski <luto@amacapital.net>
• STALE4442d [PATCH v2 3/7] seccomp: Allow arch code to provide seccomp_data
  2014-07-18 · Andy Lutomirski <luto@amacapital.net>
• STALE4442d [PATCH v2 2/7] seccomp: Refactor the filter callback and the API
  2014-07-18 · Andy Lutomirski <luto@amacapital.net>
• STALE4442d [PATCH v2 1/7] seccomp,x86,arm,mips,s390: Remove nr parameter from secure_computing
  2014-07-18 · Andy Lutomirski <luto@amacapital.net>
• STALE4442d REVIEWED: 3 (3M) [PATCH v12 08/11] seccomp: split filter prep from check and apply
  2014-07-17 · Kees Cook <hidden>
• STALE4442d REVIEWED: 3 (3M) [PATCH v12 01/11] seccomp: create internal mode-setting function
  2014-07-17 · Kees Cook <hidden>
• STALE4442d REVIEWED: 3 (3M) [PATCH v12 02/11] seccomp: extract check/assign mode helpers
  2014-07-17 · Kees Cook <hidden>
• STALE4442d REVIEWED: 3 (3M) [PATCH v12 09/11] seccomp: introduce writer locking
  2014-07-17 · Kees Cook <hidden>
• STALE4442d REVIEWED: 3 (3M) [PATCH v12 04/11] seccomp: add "seccomp" syscall
  2014-07-17 · Kees Cook <hidden>
• STALE4442d REVIEWED: 3 (3M) [PATCH v12 11/11] seccomp: implement SECCOMP_FILTER_FLAG_TSYNC
  2014-07-17 · Kees Cook <hidden>