All of lore.kernel.org
 help / color / mirror / Atom feed
From: will.deacon@arm.com (Will Deacon)
To: linux-arm-kernel@lists.infradead.org
Subject: [PATCH v10 0/6] arm64: add seccomp support
Date: Fri, 28 Nov 2014 18:43:44 +0000	[thread overview]
Message-ID: <20141128184344.GA3968@arm.com> (raw)
In-Reply-To: <1417152399-32717-1-git-send-email-takahiro.akashi@linaro.org>

On Fri, Nov 28, 2014 at 05:26:33AM +0000, AKASHI Takahiro wrote:
> This patch series enables secure computing (system call filtering) on arm64,
> and contains related enhancements and bug fixes.
> 
>   NOTE: This versions contain a workaround against possible BUG_ON() failure
>   at audit_syscall_exit(), but doesn't contain an extra optimization, as I
>   submitted for arm, of excluding syscall enter/exit tracing against invalid
>   system calls due to an issue that I reported in:
>        http://lists.infradead.org/pipermail/linux-arm-kernel/2014-October/292170.html
> 
> The code was tested on ARMv8 fast model with 64-bit/32-bit userspace using:
>  * libseccomp v2.1.1 with modifications for arm64, especially its "live"
>    tests: No.20, 21 and 24.
>  * modified version of Kees' seccomp test for 'changing/skipping a syscall'
>    and seccomp() system call
>  * in-house tests for 'changing/skipping a system call' by tracing with
>    ptrace(SETREGSET, NT_SYSTEM_CALL) (that is, not via seccomp filter)'
> with and without audit tracing.
> 
> 
> Changes v9 -> v10:
> * modified system_call_get() for big-endian build [1/6]
> * modified the way to check for syscall(-1) on syscall entry [2/6]

Applied, thanks.

Will

WARNING: multiple messages have this Message-ID (diff)
From: Will Deacon <will.deacon@arm.com>
To: AKASHI Takahiro <takahiro.akashi@linaro.org>
Cc: "keescook@chromium.org" <keescook@chromium.org>,
	Catalin Marinas <Catalin.Marinas@arm.com>,
	"dsaxena@linaro.org" <dsaxena@linaro.org>,
	"arndb@arndb.de" <arndb@arndb.de>,
	"linux-arm-kernel@lists.infradead.org" 
	<linux-arm-kernel@lists.infradead.org>,
	"linaro-kernel@lists.linaro.org" <linaro-kernel@lists.linaro.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH v10 0/6] arm64: add seccomp support
Date: Fri, 28 Nov 2014 18:43:44 +0000	[thread overview]
Message-ID: <20141128184344.GA3968@arm.com> (raw)
In-Reply-To: <1417152399-32717-1-git-send-email-takahiro.akashi@linaro.org>

On Fri, Nov 28, 2014 at 05:26:33AM +0000, AKASHI Takahiro wrote:
> This patch series enables secure computing (system call filtering) on arm64,
> and contains related enhancements and bug fixes.
> 
>   NOTE: This versions contain a workaround against possible BUG_ON() failure
>   at audit_syscall_exit(), but doesn't contain an extra optimization, as I
>   submitted for arm, of excluding syscall enter/exit tracing against invalid
>   system calls due to an issue that I reported in:
>        http://lists.infradead.org/pipermail/linux-arm-kernel/2014-October/292170.html
> 
> The code was tested on ARMv8 fast model with 64-bit/32-bit userspace using:
>  * libseccomp v2.1.1 with modifications for arm64, especially its "live"
>    tests: No.20, 21 and 24.
>  * modified version of Kees' seccomp test for 'changing/skipping a syscall'
>    and seccomp() system call
>  * in-house tests for 'changing/skipping a system call' by tracing with
>    ptrace(SETREGSET, NT_SYSTEM_CALL) (that is, not via seccomp filter)'
> with and without audit tracing.
> 
> 
> Changes v9 -> v10:
> * modified system_call_get() for big-endian build [1/6]
> * modified the way to check for syscall(-1) on syscall entry [2/6]

Applied, thanks.

Will

  parent reply	other threads:[~2014-11-28 18:43 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-11-28  5:26 [PATCH v10 0/6] arm64: add seccomp support AKASHI Takahiro
2014-11-28  5:26 ` AKASHI Takahiro
2014-11-28  5:26 ` [PATCH v10 1/6] arm64: ptrace: add NT_ARM_SYSTEM_CALL regset AKASHI Takahiro
2014-11-28  5:26   ` AKASHI Takahiro
2014-11-28  5:26 ` [PATCH v10 2/6] arm64: ptrace: allow tracer to skip a system call AKASHI Takahiro
2014-11-28  5:26   ` AKASHI Takahiro
2014-11-28  5:26 ` [PATCH v10 3/6] asm-generic: add generic seccomp.h for secure computing mode 1 AKASHI Takahiro
2014-11-28  5:26   ` AKASHI Takahiro
2014-11-28  5:26 ` [PATCH v10 4/6] arm64: add seccomp syscall for compat task AKASHI Takahiro
2014-11-28  5:26   ` AKASHI Takahiro
2014-11-28  5:26 ` [PATCH v10 5/6] arm64: add SIGSYS siginfo " AKASHI Takahiro
2014-11-28  5:26   ` AKASHI Takahiro
2014-11-28  5:26 ` [PATCH v10 6/6] arm64: add seccomp support AKASHI Takahiro
2014-11-28  5:26   ` AKASHI Takahiro
2014-11-28 18:43 ` Will Deacon [this message]
2014-11-28 18:43   ` [PATCH v10 0/6] " Will Deacon
2014-12-01 19:21   ` Kees Cook
2014-12-01 19:21     ` Kees Cook

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20141128184344.GA3968@arm.com \
    --to=will.deacon@arm.com \
    --cc=linux-arm-kernel@lists.infradead.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.