[PATCH v5 2/6] seccomp: split filter prep from check and apply

2014-05-22 Thread Kees Cook
In preparation for adding seccomp locking, move filter creation away from where it is checked and applied. This will allow for locking where no memory allocation is happening. The validation, filter attachment, and seccomp mode setting can all happen under the future locks. Signed-off-by: Kees

[PATCH v5 2/6] seccomp: split filter prep from check and apply

2014-05-22 Thread Kees Cook
In preparation for adding seccomp locking, move filter creation away from where it is checked and applied. This will allow for locking where no memory allocation is happening. The validation, filter attachment, and seccomp mode setting can all happen under the future locks. Signed-off-by: Kees