seccomp_set_mode_strict(9)

💖 NAME 💖

Bestie, welcome to seccomp_set_mode_strict(9) from the Kernel API Manual — manual name folded in near the top, just like you asked, no boring header line. seccomp_set_mode_strict is the internal function for setting strict seccomp. That's the name, that's the vibe. Slay.

✨ SYNOPSIS ✨

long seccomp_set_mode_strict (void );

🎀 ARGUMENTS 🎀

• void — no arguments. Literally nothing to pass, bestie; it's giving “no arguments” and we respect it.

🦋 DESCRIPTION 🦋

Okay so here's the whole vibe check: once current->seccomp.mode is non-zero, it may not be changed. Periodt. That's the important bit — it may not be changed after that point.

It returns 0 on success or -EINVAL on failure. Those are the outcomes, no cap. ✨

🌈 SEE ALSO 🌈

Kernel file: ./kernel/seccomp.c — yes, that exact path, bestie.

• struct seccomp_kaddfd(9)
• struct notification(9)
• struct action_cache(9)
• struct seccomp_filter(9)
• seccomp_check_filter(9)
• seccomp_cache_check_allow(9)
• seccomp_run_filters(9)
• seccomp_can_sync_threads(9)
• seccomp_filter_release(9)
• seccomp_sync_threads(9)
• seccomp_prepare_filter(9)
• seccomp_prepare_user_filter(9)
• seccomp_is_const_allow(9)
• seccomp_cache_prepare(9)
• seccomp_attach_filter(9)
• seccomp_set_mode_filter(9)
• prctl_set_seccomp(9)

Bye bestie! 💅💖 This page's source/version is ./kernel, dated October 2026, and it's still serving seccomp_set_mode_strict(9) energy. 🫶✨