On Tue, Mar 10, 2020 at 03:57:35PM -0500, Eric W. Biederman wrote:> So ptrace_attach and seccomp use the cred_guard_mutex to guarantee> a deadlock.Well, that's the result, but seccomp uses it because it wants tobe certain that credentials and no_new_privs are changed together"atomically".-- Kees Cook