On 01/14, Eyal Birger wrote: > > FWIW If I change the seccomp policy to SCMP_ACT_KILL this still fails. Ah... I don't know what SCMP_ACT_KILL is, but indeed, in general it is not safe to even try to call sys_uretprobe() if it is filtered. Say, __secure_computing(SECCOMP_MODE_STRICT)->__secure_computing_strict() does do_exit(SIGKILL) :/ Oleg.