Messages in this thread | | | Date | Wed, 31 Oct 2012 17:11:27 -0700 | From | Andrew Morton <> | Subject | Re: [PATCH] proc: add "Seccomp" to status |
| |
On Wed, 31 Oct 2012 13:09:27 -0700 Kees Cook <keescook@chromium.org> wrote:
> Adds the seccomp mode to the /proc/$pid/status file so the state of > seccomp can be externally examined.
There's no reason here for anyone to apply this patch to anything. Presumably you see some value to our users - please share your thoughts with us ;)
> --- a/fs/proc/array.c > +++ b/fs/proc/array.c > @@ -327,6 +327,13 @@ static inline void task_cap(struct seq_file *m, struct task_struct *p) > render_cap_t(m, "CapBnd:\t", &cap_bset); > } > > +static inline void task_seccomp(struct seq_file *m, struct task_struct *p) > +{ > +#ifdef CONFIG_SECCOMP
hm, OK, cpuset_task_status_allowed() is a no-op if CONFIG_CPUSETS=n, so there is precedent for fields vanishing with Kconfig changes.
> + seq_printf(m, "Seccomp:\t%d\n", p->seccomp.mode);
Get thee yon unto Documentation/filesystems/proc.txt!
> +#endif > +}
| |