* Eric W. Biederman <ebiederm@xxxxxxxxxxxx> wrote: > The trouble with attributes is that means you can't filter your system > call arguments with seccomp. [...] There's nothing keeping seccomp from securely fetching those arguments and extending filtering to them as well ... Allowing that would make sense for a lot of other system calls as well. Thanks, Ingo
