Eric Lee / smarc-fsl-linux-kernel

02 Oct, 2012

1 commit

  • 87b526d34   seccomp: Make syscall skipping and nr changes more consistent ... Browse Code »

    This fixes two issues that could cause incompatibility between
    kernel versions:

    - If a tracer uses SECCOMP_RET_TRACE to select a syscall number
    higher than the largest known syscall, emulate the unknown
    vsyscall by returning -ENOSYS. (This is unlikely to make a
    noticeable difference on x86-64 due to the way the system call
    entry works.)

    - On x86-64 with vsyscall=emulate, skipped vsyscalls were buggy.

    This updates the documentation accordingly.

    Signed-off-by: Andy Lutomirski
    Acked-by: Will Drewry
    Signed-off-by: James Morris

    Andy Lutomirski
     

07 Jul, 2012

1 commit

  • c540521bb   security: Minor improvements to no_new_privs documentation ... Browse Code »

    The documentation didn't actually mention how to enable no_new_privs.
    This also adds a note about possible interactions between
    no_new_privs and LSMs (i.e. why teaching systemd to set no_new_privs
    is not necessarily a good idea), and it references the new docs
    from include/linux/prctl.h.

    Suggested-by: Rob Landley
    Signed-off-by: Andy Lutomirski
    Acked-by: Kees Cook
    Signed-off-by: James Morris

    Andy Lutomirski
     

03 Jul, 2012

1 commit

14 Apr, 2012

1 commit

  • 8ac270d1e   Documentation: prctl/seccomp_filter ... Browse Code »

    Documents how system call filtering using Berkeley Packet
    Filter programs works and how it may be used.
    Includes an example for x86 and a semi-generic
    example using a macro-based code generator.

    Acked-by: Eric Paris
    Signed-off-by: Will Drewry
    Acked-by: Kees Cook

    v18: - added acked by
    - update no new privs numbers
    v17: - remove @compat note and add Pitfalls section for arch checking
    (keescook@chromium.org)
    v16: -
    v15: -
    v14: - rebase/nochanges
    v13: - rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc
    v12: - comment on the ptrace_event use
    - update arch support comment
    - note the behavior of SECCOMP_RET_DATA when there are multiple filters
    (keescook@chromium.org)
    - lots of samples/ clean up incl 64-bit bpf-direct support
    (markus@chromium.org)
    - rebase to linux-next
    v11: - overhaul return value language, updates (keescook@chromium.org)
    - comment on do_exit(SIGSYS)
    v10: - update for SIGSYS
    - update for new seccomp_data layout
    - update for ptrace option use
    v9: - updated bpf-direct.c for SIGILL
    v8: - add PR_SET_NO_NEW_PRIVS to the samples.
    v7: - updated for all the new stuff in v7: TRAP, TRACE
    - only talk about PR_SET_SECCOMP now
    - fixed bad JLE32 check (coreyb@linux.vnet.ibm.com)
    - adds dropper.c: a simple system call disabler
    v6: - tweak the language to note the requirement of
    PR_SET_NO_NEW_PRIVS being called prior to use. (luto@mit.edu)
    v5: - update sample to use system call arguments
    - adds a "fancy" example using a macro-based generator
    - cleaned up bpf in the sample
    - update docs to mention arguments
    - fix prctl value (eparis@redhat.com)
    - language cleanup (rdunlap@xenotime.net)
    v4: - update for no_new_privs use
    - minor tweaks
    v3: - call out BPF Berkeley Packet Filter (rdunlap@xenotime.net)
    - document use of tentative always-unprivileged
    - guard sample compilation for i386 and x86_64
    v2: - move code to samples (corbet@lwn.net)
    Signed-off-by: James Morris

    Will Drewry
     

20 Apr, 2008

1 commit

  • f13269732   generic, x86: add tests for prctl PR_GET_TSC and PR_SET_TSC ... Browse Code »

    This patch adds three tests that test whether the PR_GET_TSC and
    PR_SET_TSC commands have the desirable effect.

    The tests check whether the control register is updated correctly
    at context switches and try to discover bugs while enabling/disabling
    the timestamp counter.

    Signed-off-by: Erik Bosman
    Signed-off-by: Ingo Molnar
    Signed-off-by: Thomas Gleixner

    Erik Bosman