Skip to content

Commit

Permalink
seccomp: Remove 2-phase API documentation
Browse files Browse the repository at this point in the history
Fixes: 8112c4f ("seccomp: remove 2-phase API")

Signed-off-by: Mickaël Salaün <[email protected]>
Acked-by: Kees Cook <[email protected]>
Cc: Andy Lutomirski <[email protected]>
Cc: James Morris <[email protected]>
Signed-off-by: James Morris <[email protected]>
Signed-off-by: Kees Cook <[email protected]>
  • Loading branch information
l0kod authored and kees committed Sep 7, 2016
1 parent ce29856 commit 4fadd04
Showing 1 changed file with 0 additions and 11 deletions.
11 changes: 0 additions & 11 deletions arch/Kconfig
Original file line number Diff line number Diff line change
Expand Up @@ -336,17 +336,6 @@ config HAVE_ARCH_SECCOMP_FILTER
results in the system call being skipped immediately.
- seccomp syscall wired up

For best performance, an arch should use seccomp_phase1 and
seccomp_phase2 directly. It should call seccomp_phase1 for all
syscalls if TIF_SECCOMP is set, but seccomp_phase1 does not
need to be called from a ptrace-safe context. It must then
call seccomp_phase2 if seccomp_phase1 returns anything other
than SECCOMP_PHASE1_OK or SECCOMP_PHASE1_SKIP.

As an additional optimization, an arch may provide seccomp_data
directly to seccomp_phase1; this avoids multiple calls
to the syscall_xyz helpers for every syscall.

config SECCOMP_FILTER
def_bool y
depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET
Expand Down

0 comments on commit 4fadd04

Please sign in to comment.