diff options
author | Mickaël Salaün <[email protected]> | 2016-08-01 23:01:57 +0200 |
---|---|---|
committer | James Morris <[email protected]> | 2016-08-09 11:07:05 +1000 |
commit | 8ccc7d6bad84bebf1f1a6364d1fa04d3d7b575f6 (patch) | |
tree | 36bd7711163a5bd154efa96811f7b506d4e5930d | |
parent | 4b056a4bee006c4bd2e210d632e0ac41b3121aa9 (diff) |
seccomp: Remove 2-phase API documentation
Fixes: 8112c4f140fa ("seccomp: remove 2-phase API")
Signed-off-by: Mickaël Salaün <[email protected]>
Acked-by: Kees Cook <[email protected]>
Cc: Andy Lutomirski <[email protected]>
Cc: James Morris <[email protected]>
Signed-off-by: James Morris <[email protected]>
-rw-r--r-- | arch/Kconfig | 11 |
1 files changed, 0 insertions, 11 deletions
diff --git a/arch/Kconfig b/arch/Kconfig index bd8056b5b246..4620a11ef092 100644 --- a/arch/Kconfig +++ b/arch/Kconfig @@ -336,17 +336,6 @@ config HAVE_ARCH_SECCOMP_FILTER results in the system call being skipped immediately. - seccomp syscall wired up - For best performance, an arch should use seccomp_phase1 and - seccomp_phase2 directly. It should call seccomp_phase1 for all - syscalls if TIF_SECCOMP is set, but seccomp_phase1 does not - need to be called from a ptrace-safe context. It must then - call seccomp_phase2 if seccomp_phase1 returns anything other - than SECCOMP_PHASE1_OK or SECCOMP_PHASE1_SKIP. - - As an additional optimization, an arch may provide seccomp_data - directly to seccomp_phase1; this avoids multiple calls - to the syscall_xyz helpers for every syscall. - config SECCOMP_FILTER def_bool y depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET |