seccomp_sync_threads(9)

🧵 seccomp_sync_threads(9) 💅

okay so this is the Kernel API Manual entry for seccomp_sync_threads, and bestie, it's a tiny page with big “read the locks first” energy. no cap. 🫶

✨ NAME ✨

seccomp_sync_threads — sets all threads to use current's filter. that's the whole vibe: sync the threads to the current filter. 🦋

🌸 SYNOPSIS 🌸

void seccomp_sync_threads (unsigned long flags );

🎀 ARGUMENTS 🎀

• flags — the SECCOMP_FILTER_FLAG_* flags to set during sync. literally that. ✨

🦋 DESCRIPTION 🦋

okay, ground rules, because this function is not out here guessing. it expects sighand and cred_guard_mutex locks to be held already. and seccomp_can_sync_threads must have already returned success — without dropping the locks in between. that's the contract, bestie. don't skip the lock lore. 😭

lowkey important: this page says expects those locks held, and that seccomp_can_sync_threads already returned success without the locks getting dropped. that's the requirement. not me making up extra rules. 💅

once all that is true, this is the part where all threads get set to use current's filter. iconic behavior, honestly. 👑

🌈 SEE ALSO 🌈

the whole squad, no cap:

• Kernel file ./kernel/seccomp.c
• struct seccomp_kaddfd(9)
• struct notification(9)
• struct action_cache(9)
• struct seccomp_filter(9)
• seccomp_check_filter(9)
• seccomp_cache_check_allow(9)
• seccomp_run_filters(9)
• seccomp_can_sync_threads(9)
• seccomp_filter_release(9)
• seccomp_prepare_filter(9)
• seccomp_prepare_user_filter(9)
• seccomp_is_const_allow(9)
• seccomp_cache_prepare(9)
• seccomp_attach_filter(9)
• seccomp_set_mode_strict(9)
• seccomp_set_mode_filter(9)
• prctl_set_seccomp(9)

this page's source/version is ./kernel, it's dated October 2026, and the page is seccomp_sync_threads(9) — stay locked, stay synced, mwah 💋✨