On Sat, Jun 13, 2020 at 12:26:09AM -0700, Sargun Dhillon wrote: > This introduces an extensibility mechanism to receive seccomp > notifications. It uses read(2), as opposed to using an ioctl. The listener > must be first configured to write the notification via the > SECCOMP_IOCTL_NOTIF_CONFIG ioctl with the fields that the user is > interested in. FYI: I'm not ignoring this, but I'm trying to get the other series nailed down first. I'll cycle back around to this soon. -- Kees Cook