From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933372AbbI3SOs (ORCPT ); Wed, 30 Sep 2015 14:14:48 -0400 Received: from mail-io0-f172.google.com ([209.85.223.172]:36082 "EHLO mail-io0-f172.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933240AbbI3SOe (ORCPT ); Wed, 30 Sep 2015 14:14:34 -0400 From: Tycho Andersen To: Kees Cook , Alexei Starovoitov Cc: Will Drewry , Oleg Nesterov , Andy Lutomirski , Pavel Emelyanov , "Serge E. Hallyn" , Daniel Borkmann , linux-kernel@vger.kernel.org, netdev@vger.kernel.org, linux-api@vger.kernel.org Subject: checkpoint/restore of seccomp filters v3 Date: Wed, 30 Sep 2015 12:13:35 -0600 Message-Id: <1443636820-17083-1-git-send-email-tycho.andersen@canonical.com> X-Mailer: git-send-email 2.5.0 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi all, Here's a re-worked set for c/r of seccomp filters which keeps around the original bpf program passed to the kernel instead of trying to dump the ebpf version. There are various comments/questions in the individual patch notes. I'm not sure this needs to go via net-next any more, as the impact in net/ is fairly minimal, and it seems more seccomp heavy. As such, this set is based on seccomp/tip. Thoughts welcome, Tycho P.S. Man page patches to come once we agree on the API :)