On Tue, Jan 21, 2025 at 03:30:39PM +0100, Oleg Nesterov wrote: > How about > > __secure_computing() > { > return secure_computing_strict(syscall_get_nr(...)); > } > > in the "#ifndef CONFIG_HAVE_ARCH_SECCOMP_FILTER" section near > secure_computing_strict() in kernel/seccomp.c ? Yeah, that should be good. -- Kees Cook