prctl_set_seccomp(9)

🎀 NAME 🎀

okay so bestie, welcome to the Kernel API Manual corner 💖 this one is prctl_set_seccomp(9), and its whole main-character job is literally configuring current->seccomp.mode. no cap, that's the vibe ✨

✨ SYNOPSIS ✨

long prctl_set_seccomp (unsigned long seccomp_mode , void __user *filter
       );

💅 ARGUMENTS 💅

• seccomp_mode — the requested mode to use 🫶 like, this is the mode you're asking for, bestie.
• filter — optional struct sock_fprog for use with SECCOMP_MODE_FILTER 🦋 it's optional, so don't panic.

🦋 DESCRIPTION 🦋

Returns 0 on success or -EINVAL on failure 😭 that's it, that's the whole plot. 0 = slay, -EINVAL = not slay 💀

🌈 SEE ALSO 🌈

Kernel file ./kernel/seccomp.c — go peek, iykyk 👑

the whole squad:

• struct seccomp_kaddfd(9)
• struct notification(9)
• struct action_cache(9)
• struct seccomp_filter(9)
• seccomp_check_filter(9)
• seccomp_cache_check_allow(9)
• seccomp_run_filters(9)
• seccomp_can_sync_threads(9)
• seccomp_filter_release(9)
• seccomp_sync_threads(9)
• seccomp_prepare_filter(9)
• seccomp_prepare_user_filter(9)
• seccomp_is_const_allow(9)
• seccomp_cache_prepare(9)
• seccomp_attach_filter(9)
• seccomp_set_mode_strict(9)
• seccomp_set_mode_filter(9)

mwah 💋 cute sign-off from ./kernel, stamped October 2026, signing off as prctl_set_seccomp(9) 🌸✨