Re: [PATCH 4/7] seccomp_filter: add process state reporting

From: KOSAKI Motohiro
Date: Wed Apr 27 2011 - 23:21:53 EST


> Adds seccomp and seccomp_filter status reporting to proc.
> /proc/<pid>/status will include a Seccomp field, and
> /proc/<pid>/seccomp_filter will provide read-only access
> to the current filter and bitmask set for seccomp_filters.
>
> Signed-off-by: Will Drewry <wad@xxxxxxxxxxxx>
> ---
> fs/proc/array.c | 21 +++++++++++++++++++++
> fs/proc/base.c | 25 +++++++++++++++++++++++++
> 2 files changed, 46 insertions(+), 0 deletions(-)

I'm not againt seccomp_filter. but I dislike to increase /proc/<pid>/status mess.
1) it's read from a lot of applications, I don't want to worry about performance
thing. 2) 99.99% user never use seccomp. this field is useless for them.

Can't you make individual seccomp specific file?



--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/