On 01/15, Eyal Birger wrote: > > --- a/kernel/seccomp.c > +++ b/kernel/seccomp.c > @@ -1359,6 +1359,9 @@ int __secure_computing(const struct seccomp_data *sd) > this_syscall = sd ? sd->nr : > syscall_get_nr(current, current_pt_regs()); > > + if (this_syscall == __NR_uretprobe) > + return 0; > + Yes, this is what I meant. But we need the new arch-dependent helper. Oleg.