Messages in this thread | | | From | "Michael Kerrisk (man-pages)" <> | Date | Mon, 22 Oct 2012 23:43:25 +0200 | Subject | Re: [RESEND][PATCH] prctl: update seccomp sections for mode 2 (BPF) |
| |
>> If the CONFIG_SECCOMP_FILTER permits fork(), is the seccomp setting >> inherited across fork()? Similar question for execve(). > > Yes for both. Additionally, the filters are cumulative. (If the > filters allows prctl, additional filters can be appended; they are run > in order until the first non-allow result is seen.)
Thanks. I'll add some words to the man page.
Cheers,
Michael
-- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Author of "The Linux Programming Interface"; http://man7.org/tlpi/
| |