STRUCT SECCOMP(9)

🌸 NAME 🌸

struct seccomp — literally the state of a process that's been seccomp'ed, bestie 💅

✨ SYNOPSIS ✨

struct seccomp {
    int mode;
    atomic_t filter_count;
    struct seccomp_filter *filter;
};

🎀 Members 🎀

• mode — tells you which of the valid values above the process is rocking, i.e. what controlled system calls it's allowed to make. Main character setting fr 👑
• filter_count — the number of seccomp filters. That's it, that's the count 🧮
• filter — this one HAS to always point to a valid seccomp-filter or NULL, no cap, because it gets accessed without locking during system call entry. The way this is non-negotiable 💀

🦋 Description 🦋

Okay so listen: filter must ONLY be accessed from the context of current, because there is no read locking. Like, none. Zero. Don't try it 🙈

So just… stay in your lane, access it as current, and we all slay ✨

🌈 SEE ALSO 🌈

Kernel file ./include/linux/seccomp_types.h — go read it, iykyk 📖

that's the whole page, bestie, hope it ate 💖

source: ./include/linux · date: October 2026 · mwah, kisses, go read your kernel headers 🫶🎀