All of lore.kernel.org
 help / color / mirror / Atom feed
From: Josh Triplett <josh@joshtriplett.org>
To: Arnd Bergmann <arnd@arndb.de>
Cc: Andrew Morton <akpm@linux-foundation.org>,
	Kees Cook <keescook@chromium.org>,
	Johannes Weiner <hannes@cmpxchg.org>,
	Ingo Molnar <mingo@kernel.org>, Andy Lutomirski <luto@kernel.org>,
	Petr Mladek <pmladek@suse.com>,
	Thomas Garnier <thgarnie@google.com>,
	Ard Biesheuvel <ard.biesheuvel@linaro.org>,
	Nicolas Pitre <nicolas.pitre@linaro.org>,
	Zefan Li <lizefan@huawei.com>, Li Bin <huawei.libin@huawei.com>,
	"Eric W. Biederman" <ebiederm@xmission.com>,
	Dmitry Vyukov <dvyukov@google.com>,
	Ralf Baechle <ralf@linux-mips.org>,
	Alex Thorlton <athorlton@sgi.com>, Michal Hocko <mhocko@suse.com>,
	Mateusz Guzik <mguzik@redhat.com>,
	Cyrill Gorcunov <gorcunov@openvz.org>,
	John Stultz <john.stultz@linaro.org>,
	Al Viro <viro@zeniv.linux.org.uk>,
	Zach
Subject: Re: [PATCH 0/2] Support compiling out the prctl syscall
Date: Tue, 8 Nov 2016 19:42:09 -0800	[thread overview]
Message-ID: <20161109034209.i5ok4cy2apjp3mpk@x> (raw)
In-Reply-To: <3032452.SC5nD8WpIB@wuerfel>

On Wed, Nov 09, 2016 at 01:26:53AM +0100, Arnd Bergmann wrote:
> On Tuesday, November 8, 2016 4:17:47 PM CET Josh Triplett wrote:
> > Some embedded systems can do without the prctl syscall, saving some space.
> > 
> > This also avoids regular increases in tinyconfig size as people add more
> > non-optional functionality to prctl (observed via the 0-day kernel
> > infrastructure).
> > 
> > The first patch moves prctl and all its helpers into a separate source file,
> > kernel/prctl.c, to allow making it optional via the Makefile without any
> > ifdefs.  The second patch adds the Kconfig option to make prctl optional.
> > 
> > Josh Triplett (2):
> >   kernel: Move prctl and helpers from kernel/sys.c to new kernel/prctl.c
> >   kernel: Support compiling out the prctl syscall
> > 
> 
> Both of these look really nice to me. Another syscall that comes to
> mind as a candidate to be made optional is ptrace, and I've added
> Nicolas Pitre to Cc here, as he has looked into this before.

I've looked at that as well; it's a rather more complex patch, as
several other bits of the kernel hook into ptrace or otherwise depend on
ptrace.  (And ptrace_may_access will need to stick around even when
ptrace doesn't.)

- Josh Triplett

WARNING: multiple messages have this Message-ID (diff)
From: Josh Triplett <josh@joshtriplett.org>
To: Arnd Bergmann <arnd@arndb.de>
Cc: Andrew Morton <akpm@linux-foundation.org>,
	Kees Cook <keescook@chromium.org>,
	Johannes Weiner <hannes@cmpxchg.org>,
	Ingo Molnar <mingo@kernel.org>, Andy Lutomirski <luto@kernel.org>,
	Petr Mladek <pmladek@suse.com>,
	Thomas Garnier <thgarnie@google.com>,
	Ard Biesheuvel <ard.biesheuvel@linaro.org>,
	Nicolas Pitre <nicolas.pitre@linaro.org>,
	Zefan Li <lizefan@huawei.com>, Li Bin <huawei.libin@huawei.com>,
	"Eric W. Biederman" <ebiederm@xmission.com>,
	Dmitry Vyukov <dvyukov@google.com>,
	Ralf Baechle <ralf@linux-mips.org>,
	Alex Thorlton <athorlton@sgi.com>, Michal Hocko <mhocko@suse.com>,
	Mateusz Guzik <mguzik@redhat.com>,
	Cyrill Gorcunov <gorcunov@openvz.org>,
	John Stultz <john.stultz@linaro.org>,
	Al Viro <viro@zeniv.linux.org.uk>, Zach Brown <zab@redhat.com>,
	Anna Schumaker <Anna.Schumaker@netapp.com>,
	Dave Hansen <dave.hansen@intel.com>,
	linux-kernel@vger.kernel.org, linux-api@vger.kernel.org,
	Nicolas Pitre <nico@linaro.org>
Subject: Re: [PATCH 0/2] Support compiling out the prctl syscall
Date: Tue, 8 Nov 2016 19:42:09 -0800	[thread overview]
Message-ID: <20161109034209.i5ok4cy2apjp3mpk@x> (raw)
In-Reply-To: <3032452.SC5nD8WpIB@wuerfel>

On Wed, Nov 09, 2016 at 01:26:53AM +0100, Arnd Bergmann wrote:
> On Tuesday, November 8, 2016 4:17:47 PM CET Josh Triplett wrote:
> > Some embedded systems can do without the prctl syscall, saving some space.
> > 
> > This also avoids regular increases in tinyconfig size as people add more
> > non-optional functionality to prctl (observed via the 0-day kernel
> > infrastructure).
> > 
> > The first patch moves prctl and all its helpers into a separate source file,
> > kernel/prctl.c, to allow making it optional via the Makefile without any
> > ifdefs.  The second patch adds the Kconfig option to make prctl optional.
> > 
> > Josh Triplett (2):
> >   kernel: Move prctl and helpers from kernel/sys.c to new kernel/prctl.c
> >   kernel: Support compiling out the prctl syscall
> > 
> 
> Both of these look really nice to me. Another syscall that comes to
> mind as a candidate to be made optional is ptrace, and I've added
> Nicolas Pitre to Cc here, as he has looked into this before.

I've looked at that as well; it's a rather more complex patch, as
several other bits of the kernel hook into ptrace or otherwise depend on
ptrace.  (And ptrace_may_access will need to stick around even when
ptrace doesn't.)

- Josh Triplett

  reply	other threads:[~2016-11-09  3:42 UTC|newest]

Thread overview: 24+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-11-09  0:17 [PATCH 0/2] Support compiling out the prctl syscall Josh Triplett
2016-11-09  0:17 ` Josh Triplett
     [not found] ` <cover.c693f10dfc19e12c214758e4b13ca9b4e4cf9668.1478650356.git-series.josh-iaAMLnmF4UmaiuxdJuQwMA@public.gmane.org>
2016-11-09  0:18   ` [PATCH 1/2] kernel: Move prctl and helpers from kernel/sys.c to new kernel/prctl.c Josh Triplett
2016-11-09  0:18     ` Josh Triplett
     [not found]     ` <afb9a2bb41be9e129ececea27e09a7d69d1c5e6c.1478650356.git-series.josh-iaAMLnmF4UmaiuxdJuQwMA@public.gmane.org>
2016-11-09  0:19       ` Andy Lutomirski
2016-11-09  0:19         ` Andy Lutomirski
2016-11-09  7:02       ` Cyrill Gorcunov
2016-11-09  7:02         ` Cyrill Gorcunov
2016-11-09  0:18   ` [PATCH 2/2] kernel: Support compiling out the prctl syscall Josh Triplett
2016-11-09  0:18     ` Josh Triplett
     [not found]     ` <b5c45594261252a486b891090eba8f10aa7ed329.1478650356.git-series.josh-iaAMLnmF4UmaiuxdJuQwMA@public.gmane.org>
2016-11-09  0:40       ` Kees Cook
2016-11-09  0:40         ` Kees Cook
     [not found]         ` <CAGXu5j+V11oF0gcqBQTsBMgetsSdRqLQffobhyEbze82gbW2vA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2016-11-09  0:47           ` Josh Triplett
2016-11-09  0:47             ` Josh Triplett
2016-11-09  0:56             ` Kees Cook
2016-11-09  0:56               ` Kees Cook
     [not found]               ` <CAGXu5jK-dh0DYGp=syrJb6NQ6x_FNBc-migCj4fvBHv4yvukpA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2016-11-09  1:08                 ` Josh Triplett
2016-11-09  1:08                   ` Josh Triplett
2016-11-09  0:26   ` [PATCH 0/2] " Arnd Bergmann
2016-11-09  0:26     ` Arnd Bergmann
2016-11-09  3:42     ` Josh Triplett [this message]
2016-11-09  3:42       ` Josh Triplett
2016-11-09  0:30   ` Nicolas Pitre
2016-11-09  0:30     ` Nicolas Pitre

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20161109034209.i5ok4cy2apjp3mpk@x \
    --to=josh@joshtriplett.org \
    --cc=akpm@linux-foundation.org \
    --cc=ard.biesheuvel@linaro.org \
    --cc=arnd@arndb.de \
    --cc=athorlton@sgi.com \
    --cc=dvyukov@google.com \
    --cc=ebiederm@xmission.com \
    --cc=gorcunov@openvz.org \
    --cc=hannes@cmpxchg.org \
    --cc=huawei.libin@huawei.com \
    --cc=john.stultz@linaro.org \
    --cc=keescook@chromium.org \
    --cc=lizefan@huawei.com \
    --cc=luto@kernel.org \
    --cc=mguzik@redhat.com \
    --cc=mhocko@suse.com \
    --cc=mingo@kernel.org \
    --cc=nicolas.pitre@linaro.org \
    --cc=pmladek@suse.com \
    --cc=ralf@linux-mips.org \
    --cc=thgarnie@google.com \
    --cc=viro@zeniv.linux.org.uk \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.