On Tue, Mar 10, 2020 at 03:57:35PM -0500, Eric W. Biederman wrote:
So ptrace_attach and seccomp use the cred_guard_mutex to guarantee a deadlock.
Well, that's the result, but seccomp uses it because it wants to be certain that credentials and no_new_privs are changed together "atomically".