lkml.org 
[lkml]   [2016]   [Jan]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [PATCH v3 0/4] um: Add seccomp support
On Mon, Jan 4, 2016 at 8:13 PM, Kees Cook <keescook@chromium.org> wrote:
> On Tue, Dec 29, 2015 at 12:35 PM, Mickaël Salaün <mic@digikod.net> wrote:
>> This series add seccomp support to User-mode Linux (i386 and x86_64
>> subarchitectures) and fix ptrace issues. This apply on v4.4-rc7 and pass all
>> the 48 tests from selftest/seccomp plus the UML ptsc test.
>>
>> Changes since v2:
>> * remove get_syscall() from os.h and don't include it in syscall.c [1/4]
>> * rebase to v4.4-rc7
>>
>> Changes since v1; addressed Richard Weinberger's comments:
>> * fix a new PTRACE_SETREGS bug on x86_64 [1/4]
>> * fix an old PTRACE_SETREGS bug when updating orig_ax on i386 [1/4]
>
> Thanks for working on this!
>
> Acked-by: Kees Cook <keescook@chromium.org>
>
> Feel free to pull this through the uml tree.
>
> Thanks!
>
> -Kees

I also had a version of Meredydd Luff's original patch in my local tree so I
could do UML testing of Capsicum (which uses seccomp for some of its
userspace implementation). I've replaced my patch with this version, as
it's much more complete, and all my tests still work. Which I guess is
kind of:

Tested-by: David Drysdale <drysdale@google.com>

Many thanks,
David

>>
>> Regards,
>> Mickaël
>>
>> Mickaël Salaün (4):
>> um: Fix ptrace GETREGS/SETREGS bugs
>> selftests/seccomp: Remove the need for HAVE_ARCH_TRACEHOOK
>> um: Add full asm/syscall.h support
>> um: Add seccomp support
>>
>> .../seccomp/seccomp-filter/arch-support.txt | 2 +-
>> arch/um/Kconfig.common | 1 +
>> arch/um/Kconfig.um | 16 +++
>> arch/um/include/asm/syscall-generic.h | 138 +++++++++++++++++++++
>> arch/um/include/asm/thread_info.h | 2 +
>> arch/um/include/shared/os.h | 1 -
>> arch/um/kernel/skas/syscall.c | 31 +++--
>> arch/um/os-Linux/skas/process.c | 7 --
>> arch/x86/um/asm/syscall.h | 1 +
>> arch/x86/um/ptrace_32.c | 8 +-
>> tools/testing/selftests/seccomp/seccomp_bpf.c | 27 +++-
>> 11 files changed, 205 insertions(+), 29 deletions(-)
>> create mode 100644 arch/um/include/asm/syscall-generic.h
>>
>> --
>> 2.6.4
>>
>
>
>
> --
> Kees Cook
> Chrome OS & Brillo Security


\
 
 \ /
  Last update: 2016-01-06 15:41    [W:0.079 / U:0.192 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site