On 01/28, Oleg Nesterov wrote: > > can't review, I know nothing about seccomp_cache, but > > On 01/28, Eyal Birger wrote: > > > > +static bool seccomp_is_const_allow(struct sock_fprog_kern *fprog, > > + struct seccomp_data *sd) > > +{ > > +#ifdef __NR_uretprobe > > + if (sd->nr == __NR_uretprobe > > +#ifdef SECCOMP_ARCH_COMPAT > > + && sd->arch != SECCOMP_ARCH_COMPAT > > +#endif > > it seems you can check > > && sd->arch == SECCOMP_ARCH_NATIVE > > and avoid #ifdef SECCOMP_ARCH_COMPAT Although perhaps you added this ifdef to avoid the unnecessary sd->arch check if !CONFIG_COMPAT ... Oleg.