lkml.org 
[lkml]   [2016]   [Mar]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH v2 6/6] secomp: Constify mode1 syscall whitelist
    Date
    These values are constant and should be marked as such.

    Signed-off-by: Matt Redfearn <matt.redfearn@imgtec.com>
    ---

    Changes in v2: None

    kernel/seccomp.c | 4 ++--
    1 file changed, 2 insertions(+), 2 deletions(-)

    diff --git a/kernel/seccomp.c b/kernel/seccomp.c
    index b0082c14764f..9243d686d11a 100644
    --- a/kernel/seccomp.c
    +++ b/kernel/seccomp.c
    @@ -513,14 +513,14 @@ static void seccomp_send_sigsys(int syscall, int reason)
    * To be fully secure this must be combined with rlimit
    * to limit the stack allocations too.
    */
    -static int mode1_syscalls[] = {
    +static const int mode1_syscalls[] = {
    __NR_seccomp_read, __NR_seccomp_write, __NR_seccomp_exit, __NR_seccomp_sigreturn,
    0, /* null terminated */
    };

    static void __secure_computing_strict(int this_syscall)
    {
    - int *syscall_whitelist = mode1_syscalls;
    + const int *syscall_whitelist = mode1_syscalls;
    #ifdef CONFIG_COMPAT
    if (is_compat_task())
    syscall_whitelist = get_compat_mode1_syscalls();
    --
    2.5.0
    \
     
     \ /
      Last update: 2016-03-29 11:02    [W:2.486 / U:0.040 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site