seccomp_cache_check_allow(9)
β¨ seccomp_cache_check_allow(9) β¨
okay bestie, welcome to the Kernel API Manual page for seccomp_cache_check_allow β section 9, kernel API vibes only, this is the one π«Ά
π NAME
seccomp_cache_check_allow β lookup seccomp cache πβ¨
like, it literally goes and checks the cache, no cap
π SYNOPSIS
bool seccomp_cache_check_allow (const struct seccomp_filter *sfilter ,
const struct seccomp_data *sd );
yes the parameters really are named sfilter and sd, we love a naming convention that ate π
π¦ ARGUMENTS
sfilterβ the seccomp filter πΈ like, the filter itself, the main charactersdβ the seccomp data you're looking up the cache with π gotta feed it the right data or the lookup is giving nothing
π DESCRIPTION
Returns true if the seccomp_data is cached and allowed. periodt. β¨
that's it, that's the whole thing β both conditions though, ok? it has to be cached and allowed for you to get that true. not me being explicit about the and but someone had to say it π
π SEE ALSO
the whole friend group, fr fr π
- Kernel file
./kernel/seccomp.c struct seccomp_kaddfd(9)struct notification(9)struct action_cache(9)struct seccomp_filter(9)seccomp_check_filter(9)seccomp_run_filters(9)seccomp_can_sync_threads(9)seccomp_filter_release(9)seccomp_sync_threads(9)seccomp_prepare_filter(9)seccomp_prepare_user_filter(9)seccomp_is_const_allow(9)seccomp_cache_prepare(9)seccomp_attach_filter(9)seccomp_set_mode_strict(9)seccomp_set_mode_filter(9)prctl_set_seccomp(9)
like, that's the entire group chat, every single one of them π no skipping, iykyk
πΈ friendly reminder: the true in DESCRIPTION is about cached and allowed β don't go reading extra lore into it, this page says exactly what it says π«Ά
and that's the page bestie!! sourced straight from ./kernel, dated October 2026 β iconic, timeless, no notes ππβ¨
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms