Messages in this thread | | | Date | Fri, 6 Apr 2012 14:26:44 -0700 | From | Andrew Morton <> | Subject | Re: [PATCH v17 15/15] Documentation: prctl/seccomp_filter |
| |
On Thu, 29 Mar 2012 15:02:00 -0500 Will Drewry <wad@chromium.org> wrote:
> Documents how system call filtering using Berkeley Packet > Filter programs works and how it may be used. > Includes an example for x86 and a semi-generic > example using a macro-based code generator. > > > ... > > +Adding architecture support > +----------------------- > + > +See arch/Kconfig for the authoritative requirements. In general, if an > +architecture supports both ptrace_event and seccomp, it will be able to > +support seccomp filter with minor fixup: SIGSYS support and seccomp return > +value checking. Then it must just add CONFIG_HAVE_ARCH_SECCOMP_FILTER > +to its arch-specific Kconfig. > diff --git a/samples/Makefile b/samples/Makefile > index 2f75851..5ef08bb 100644 > --- a/samples/Makefile > +++ b/samples/Makefile
Oh good, I was going to ask about that.
Can we get this code into tools/testing/selftests? That way people will run it more often and it's more likely to be maintained as the code evolves.
| |