Andy Lutomirski d39bd00dea seccomp: Allow arch code to provide seccomp_data ...

populate_seccomp_data is expensive: it works by inspecting
task_pt_regs and various other bits to piece together all the
information, and it's does so in multiple partially redundant steps.

Arch-specific code in the syscall entry path can do much better.

Admittedly this adds a bit of additional room for error, but the
speedup should be worth it.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Kees Cook <keescook@chromium.org>

2014-09-03 14:58:17 -07:00

2.2 KiB

Raw Blame History

View Raw