lkml.org 
[lkml]   [2014]   [Jul]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH v12 01/11] seccomp: create internal mode-setting function
    Date
    In preparation for having other callers of the seccomp mode setting
    logic, split the prctl entry point away from the core logic that performs
    seccomp mode setting.

    Signed-off-by: Kees Cook <keescook@chromium.org>
    Reviewed-by: Oleg Nesterov <oleg@redhat.com>
    Reviewed-by: Andy Lutomirski <luto@amacapital.net>
    ---
    kernel/seccomp.c | 16 ++++++++++++++--
    1 file changed, 14 insertions(+), 2 deletions(-)

    diff --git a/kernel/seccomp.c b/kernel/seccomp.c
    index 301bbc24739c..afb916c7e890 100644
    --- a/kernel/seccomp.c
    +++ b/kernel/seccomp.c
    @@ -473,7 +473,7 @@ long prctl_get_seccomp(void)
    }

    /**
    - * prctl_set_seccomp: configures current->seccomp.mode
    + * seccomp_set_mode: internal function for setting seccomp mode
    * @seccomp_mode: requested mode to use
    * @filter: optional struct sock_fprog for use with SECCOMP_MODE_FILTER
    *
    @@ -486,7 +486,7 @@ long prctl_get_seccomp(void)
    *
    * Returns 0 on success or -EINVAL on failure.
    */
    -long prctl_set_seccomp(unsigned long seccomp_mode, char __user *filter)
    +static long seccomp_set_mode(unsigned long seccomp_mode, char __user *filter)
    {
    long ret = -EINVAL;

    @@ -517,3 +517,15 @@ long prctl_set_seccomp(unsigned long seccomp_mode, char __user *filter)
    out:
    return ret;
    }
    +
    +/**
    + * prctl_set_seccomp: configures current->seccomp.mode
    + * @seccomp_mode: requested mode to use
    + * @filter: optional struct sock_fprog for use with SECCOMP_MODE_FILTER
    + *
    + * Returns 0 on success or -EINVAL on failure.
    + */
    +long prctl_set_seccomp(unsigned long seccomp_mode, char __user *filter)
    +{
    + return seccomp_set_mode(seccomp_mode, filter);
    +}
    --
    1.7.9.5


    \
     
     \ /
      Last update: 2014-07-18 17:41    [W:2.925 / U:0.348 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site