can't review, I know nothing about seccomp_cache, but
On 01/28, Eyal Birger wrote:
+static bool seccomp_is_const_allow(struct sock_fprog_kern *fprog,
struct seccomp_data *sd)
+{ +#ifdef __NR_uretprobe
- if (sd->nr == __NR_uretprobe
+#ifdef SECCOMP_ARCH_COMPAT
&& sd->arch != SECCOMP_ARCH_COMPAT
+#endif
it seems you can check
&& sd->arch == SECCOMP_ARCH_NATIVE
and avoid #ifdef SECCOMP_ARCH_COMPAT
Oleg.