secure computing · Supported

Maintainers

• M Kees Cook <kees@kernel.org>
• R Andy Lutomirski <luto@amacapital.net>
• R Will Drewry <wad@chromium.org>

Paths

• F Documentation/userspace-api/seccomp_filter.rst
• F include/linux/seccomp.h
• F include/uapi/linux/seccomp.h
• F kernel/seccomp.c
• F tools/testing/selftests/kselftest_harness.h
• F tools/testing/selftests/kselftest_harness/
• F tools/testing/selftests/seccomp/*

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-mips (capped at 30), ordered by date desc.

• COLD17d [PATCH RFC POC 39/50] seccomp: stop putting the listener descriptor back on failure
  2026-09-15 · Christian Brauner <brauner@kernel.org>
• STALE86d [PATCH v16 01/18] seccomp: Convert __secure_computing() to return boolean
  2026-06-29 · Jinjie Ruan <hidden>
• STALE600d LANDED: 14 (14M) [PATCH v2 4/4] seccomp: remove the 'sd' argument from __seccomp_filter()
  2025-01-28 · Oleg Nesterov <oleg@redhat.com>
• STALE600d LANDED: 14 (14M) [PATCH v2 3/4] seccomp: remove the 'sd' argument from __secure_computing()
  2025-01-28 · Oleg Nesterov <oleg@redhat.com>
• STALE600d LANDED [PATCH v2 2/4] seccomp: fix the __secure_computing() stub for !HAVE_ARCH_SECCOMP_FILTER
  2025-01-28 · Oleg Nesterov <oleg@redhat.com>
• STALE600d [PATCH v2 0/4] seccomp: remove the 'sd' argument from __secure_computing()
  2025-01-28 · Oleg Nesterov <oleg@redhat.com>
• STALE614d [PATCH 4/4] seccomp: remove the 'sd' argument from __seccomp_filter()
  2025-01-20 · Oleg Nesterov <oleg@redhat.com>
• STALE614d [PATCH 3/4] seccomp: remove the 'sd' argument from __secure_computing()
  2025-01-20 · Oleg Nesterov <oleg@redhat.com>
• STALE614d [PATCH 2/4] seccomp: kill the dead code in the !CONFIG_HAVE_ARCH_SECCOMP_FILTER version of __secure_computing()
  2025-01-20 · Oleg Nesterov <oleg@redhat.com>
• STALE2206d Re: [PATCH 00/15] selftests/seccomp: Refactor change_syscall()
  2020-09-15 · Michael Ellerman <mpe@ellerman.id.au>
• STALE2297d [PATCH] seccomp: Use -1 marker for end of mode 1 syscall list
  2020-06-19 · Kees Cook <hidden>
• STALE2738d [PATCH 5/6 v3] syscalls: Remove start and number from syscall_get_arguments() args
  2019-04-01 · Steven Rostedt <rostedt@goodmis.org>
• STALE2744d [RFC][PATCH 3/4 v2] syscalls: Remove start and number from syscall_get_arguments() args
  2019-03-29 · Steven Rostedt <rostedt@goodmis.org>
• STALE2754d REVIEWED: 6 (5M) [PATCH v2 13/13] syscall_get_arch: add "struct task_struct *" argument
  2019-03-17 · Dmitry V. Levin <hidden>
• STALE2768d REVIEWED: 6 (5M) [PATCH 14/14] syscall_get_arch: add "struct task_struct *" argument
  2019-01-09 · Dmitry V. Levin <hidden>
• STALE2774d REVIEWED: 1 (0M) [PATCH v7 20/22] syscall_get_arch: add "struct task_struct *" argument
  2019-01-07 · Dmitry V. Levin <hidden>
• STALE2843d REVIEWED: 1 (0M) [PATCH v6 24/27] syscall_get_arch: add "struct task_struct *" argument
  2018-12-13 · Dmitry V. Levin <hidden>
• STALE2744d REVIEWED: 1 (0M) [PATCH v5 22/25] syscall_get_arch: add "struct task_struct *" argument
  2018-12-10 · Dmitry V. Levin <hidden>
• STALE2861d REVIEWED: 1 (0M) [PATCH v2 16/15 v2] syscall_get_arch: add "struct task_struct *" argument
  2018-11-21 · Dmitry V. Levin <hidden>
• STALE2861d [PATCH v2 16/15] syscall_get_arch: add "struct task_struct *" argument
  2018-11-21 · Dmitry V. Levin <hidden>
• STALE3764d [PATCH 02/14] seccomp: Add a seccomp_data parameter secure_computing()
  2016-06-09 · Kees Cook <hidden>
• STALE3764d [PATCH 04/14] seccomp: remove 2-phase API
  2016-06-09 · Kees Cook <hidden>
• STALE3764d [PATCH 05/14] seccomp: recheck the syscall after RET_TRACE
  2016-06-09 · Kees Cook <hidden>
• STALE3770d [PATCH] tree-wide: replace config_enabled() with IS_ENABLED()
  2016-06-06 · Masahiro Yamada <hidden>
• STALE3838d [PATCH v2 4/6] seccomp: Get compat syscalls from asm-generic header
  2016-03-29 · Matt Redfearn <hidden>
• STALE3838d [PATCH v2 6/6] secomp: Constify mode1 syscall whitelist
  2016-03-29 · Matt Redfearn <hidden>
• STALE3846d [PATCH v2 04/16] seccomp: Check in_compat_syscall, not is_compat_task, in strict mode
  2016-01-25 · Andy Lutomirski <luto@kernel.org>
• STALE4257d Re: [PATCH v5 3/5] x86: Split syscall_trace_enter into two phases
  2015-02-06 · Kees Cook <hidden>
• STALE4443d [PATCH v3 3/8] seccomp: Allow arch code to provide seccomp_data
  2014-07-22 · Andy Lutomirski <luto@amacapital.net>
• STALE4443d [PATCH v3 2/8] seccomp: Refactor the filter callback and the API
  2014-07-22 · Andy Lutomirski <luto@amacapital.net>