lkml.org 
[lkml]   [2015]   [Mar]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [PATCH] Don't allow blocking of signals using sigreturn.
Jann Horn writes:
> Or should I throw this patch away and write a patch
> for the prctl() manpage instead that documents that
> being able to call sigreturn() implies being able to
> effectively call sigprocmask(), at least on some
> architectures like X86?

Well, that is the semantics of sigreturn(). It is essentially
setcontext() [which includes the actions of sigprocmask()], but
with restrictions on parameter placement (at least on x86).

You could introduce some setting to restrict that aspect for
seccomp processes, but you can't change this for normal processes
without breaking things.


\
 
 \ /
  Last update: 2015-03-11 23:01    [W:0.116 / U:0.292 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site