Has this patch been merged or rejected? Or the discussion has just ended without evolving? Maybe the fact that seccomp filters can be rewritten as binary trees is enough to don't add hash maps support for seccomp?
https://groups.google.com/forum/#!msg/libseccomp/pX6QkVF0F74/ZUJlwI5qAwAJ
Yes, I struggle to follow kernel patches discussions and to understand if they are merged or not XD :(
That patch has not been merged. seccomp-bpf still doesn't support eBPF bytecode or even just maps. It seems unlikely that seccomp-bpf will ever rely on eBPF instead of cBPF.
Binary trees were indeed considered a good enough solution for anyone who needs very high seccomp-bpf performance. Although I don't think libseccomp supports binary trees yet.