can't review, I know nothing about seccomp_cache, but On 01/28, Eyal Birger wrote: > > +static bool seccomp_is_const_allow(struct sock_fprog_kern *fprog, > + struct seccomp_data *sd) > +{ > +#ifdef __NR_uretprobe > + if (sd->nr == __NR_uretprobe > +#ifdef SECCOMP_ARCH_COMPAT > + && sd->arch != SECCOMP_ARCH_COMPAT > +#endif it seems you can check && sd->arch == SECCOMP_ARCH_NATIVE and avoid #ifdef SECCOMP_ARCH_COMPAT Oleg.