tree df273ffd6f69e1fd7f6862a48c36a7002174b5cb
parent 95a126d9812ff51f7ff3e42d956390ff9a1801f8
author Sargun Dhillon <sargun@sargun.me> 1651110886 -0700
committer Kees Cook <keescook@chromium.org> 1651257054 -0700

seccomp: Use FIFO semantics to order notifications

Previously, the seccomp notifier used LIFO semantics, where each
notification would be added on top of the stack, and notifications
were popped off the top of the stack. This could result one process
that generates a large number of notifications preventing other
notifications from being handled. This patch moves from LIFO (stack)
semantics to FIFO (queue semantics).

Signed-off-by: Sargun Dhillon <sargun@sargun.me>
Reviewed-by: Christian Brauner (Microsoft) <brauner@kernel.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20220428015447.13661-1-sargun@sargun.me