PR_GET_SECCOMP - get the secure computing mode

Return the secure computing mode of the calling thread. If the caller is not in secure computing mode, this operation returns 0; if the caller is in strict secure computing mode, then the prctl() call will cause a SIGKILL signal to be sent to the process. If the caller is in filter mode, and this system call is allowed by the seccomp filters, it returns 2; otherwise, the process is killed with a SIGKILL signal. This operation is available only if the kernel is configured with CONFIG_SECCOMP enabled.

EINVAL The kernel was not configured with CONFIG_SECCOMP. SIGKILL The caller is in strict secure computing mode. SIGKILL The caller is in filter mode, and this system call is not allowed by the seccomp filters.

/proc/pid/status Since Linux 3.8, the Seccomp field of this file provides a method of obtaining the same information, without the risk that the process is killed; see proc_pid_status(5).

Linux 2.6.23.

Standard C library (libc, -lc)

PR_GET_SECCOMP - get the secure computing mode

On success, this call returns the nonnegative value described above. On error, -1 is returned, and errno is set to indicate the error; or the process is killed.

prctl(2), PR_SET_SECCOMP(2const), seccomp(2) Linux man-pages 6.9.1 2024-06-02 PR_GET_SECCOMP(2)

Linux.

#include<linux/prctl.h> /* Definition of PR_* constants */ #include<sys/prctl.h>intprctl(PR_GET_SECCOMP);