seccomp_set_mode_filter(9)

💅 seccomp_set_mode_filter — like, the internal function for setting seccomp filter (this is from the Kernel API Manual, bestie, section 9) 🎀

---

✨ NAME ✨

seccomp_set_mode_filter — the internal function that handles setting up your seccomp filter. yes it's internal, no you can't just call it from your little userspace program, it's kernel business 💅

---

🌸 SYNOPSIS 🌸

long seccomp_set_mode_filter (unsigned int flags , const char __user
       *filter );

---

🦋 ARGUMENTS 🦋

• flags — the flags that change how the filter behaves, icon behavior fr
• filter — a struct sock_fprog that's holding your filter, she's the main character here 👑

---

💖 DESCRIPTION 💖

okay so the way this works is — you can literally call this function repeatedly to install additional filters. like, stack them. the more the merrier, no cap.

Every filter that gets successfully installed will be evaluated in reverse order for each system call the task makes. so the last one you added gets checked first, iykyk 🔥

Once current->seccomp.mode is non-zero, it may not be changed. that's it, that's the rule, it's locked in, periodt. 💀

Returns 0 on success or -EINVAL on failure. that's literally it, those are the two outcomes, she's not complicated 🫶

---

🌈 SEE ALSO 🌈

• Kernel file ./kernel/seccomp.c
• struct seccomp_kaddfd(9)
• struct notification(9)
• struct action_cache(9)
• struct seccomp_filter(9)
• seccomp_check_filter(9)
• seccomp_cache_check_allow(9)
• seccomp_run_filters(9)
• seccomp_can_sync_threads(9)
• seccomp_filter_release(9)
• seccomp_sync_threads(9)
• seccomp_prepare_filter(9)
• seccomp_prepare_user_filter(9)
• seccomp_is_const_allow(9)
• seccomp_cache_prepare(9)
• seccomp_attach_filter(9)
• seccomp_set_mode_strict(9)
• prctl_set_seccomp(9)

go read them, they're all in their slay era too ⭐

---

okay that's the whole page!! this little gem lives in ./kernel, dated October 2026, and it's seccomp_set_mode_filter(9) all day every day 🧚💜 hope you understood it bestie, mwah 💋