All of lore.kernel.org
 help / color / mirror / Atom feed
From: Ralf Baechle <ralf@linux-mips.org>
To: Andy Lutomirski <luto@amacapital.net>
Cc: Markos Chandras <Markos.Chandras@imgtec.com>,
	Eric Paris <eparis@redhat.com>,
	libseccomp-discuss@lists.sourceforge.net,
	linux-mips@linux-mips.org
Subject: Re: [libseccomp-discuss] [PATCH v3 0/2] Add support for MIPS BE/LE and O32 ABI
Date: Thu, 17 Apr 2014 22:07:15 +0200	[thread overview]
Message-ID: <20140417200715.GA8190@linux-mips.org> (raw)
In-Reply-To: <CALCETrVTptDpPmC_aqL1T10Pm5tTMXJpBLK=osZmc5Vei0bMkA@mail.gmail.com>

On Thu, Apr 17, 2014 at 12:38:36PM -0700, Andy Lutomirski wrote:

> > I can't imagine any legitimate reason why an application of a particular
> > ABI would want to try a syscall of another ABI, for example why an N64
> > process would want to call the O32 open(2) syscall.
> 
> I've done it for testing.  And x32 does it because it's x32.

So from that perspective x32 isn't even a new ABI, just a castrated 64 bit
app using the 64 bit ABI.

> > For that reason I've long been contemplating to make syscalls of other ABIs
> > unavailable, even without seccomp.  Would that be useful for seccomp?
> 
> It's still possible to execve something else.

Would that other process then have a different syscall filter or is there only
one global one?

> > One exception though - I've seen a non-O32 application using syscall 4000,
> > the indirect syscall syscall.  Some needs to be the first to be taken out
> > and shot ;-)
> >
> 
> Aargh.  Let me guess: the indirect syscall syscall uses seven argument
> registers.  I guess ARM wasn't the only architecture to make the
> mistake of having one of those :(

Yes, seven arguments.  The sole reason why MIPS has an indirect syscall is that
I followed the the example of earlier MIPS UNIX variants.  And it has interesting
issues such as with 64 bit arguments on 32 bit machines.

  Ralf

  reply	other threads:[~2014-04-17 20:07 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <1397550996-14805-1-git-send-email-markos.chandras@imgtec.com>
     [not found] ` <1397738551.2725.18.camel@localhost>
     [not found]   ` <534FCF75.7060708@imgtec.com>
     [not found]     ` <4648181.no7KCQCtEi@sifl>
     [not found]       ` <534FFBCF.5010800@imgtec.com>
     [not found]         ` <1397750939.750.1.camel@localhost>
2014-04-17 16:20           ` [libseccomp-discuss] [PATCH v3 0/2] Add support for MIPS BE/LE and O32 ABI Andy Lutomirski
2014-04-17 16:24             ` Markos Chandras
2014-04-17 16:24               ` Markos Chandras
2014-04-17 19:13               ` Ralf Baechle
2014-04-17 19:38                 ` Andy Lutomirski
2014-04-17 20:07                   ` Ralf Baechle [this message]
2014-04-17 20:30                     ` Paul Moore
2014-04-22 14:40 ` [PATCH 3.15] MIPS: Add new AUDIT_ARCH token for the N32 ABI on MIPS64 Markos Chandras
2014-04-22 14:40   ` Markos Chandras
2014-04-24 19:19   ` Paul Moore
2014-04-30  9:24     ` Markos Chandras
2014-04-30  9:24       ` Markos Chandras
2014-05-06  7:47       ` Markos Chandras
2014-05-06  7:47         ` Markos Chandras
2014-05-08 14:10       ` Paul Moore
2014-05-12 18:53   ` Paul Moore
2014-05-12 19:09     ` Eric Paris
2014-05-21 20:59     ` Paul Moore
2014-05-21 21:07       ` Andy Lutomirski
2014-05-21 22:10       ` James Hogan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20140417200715.GA8190@linux-mips.org \
    --to=ralf@linux-mips.org \
    --cc=Markos.Chandras@imgtec.com \
    --cc=eparis@redhat.com \
    --cc=libseccomp-discuss@lists.sourceforge.net \
    --cc=linux-mips@linux-mips.org \
    --cc=luto@amacapital.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.