On Tue, Mar 10, 2020 at 03:57:35PM -0500, Eric W. Biederman wrote: > So ptrace_attach and seccomp use the cred_guard_mutex to guarantee > a deadlock. Well, that's the result, but seccomp uses it because it wants to be certain that credentials and no_new_privs are changed together "atomically". -- Kees Cook