From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-ej1-f50.google.com (mail-ej1-f50.google.com [209.85.218.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id F0219493633 for ; Sat, 22 Aug 2026 07:23:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.218.50 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787383415; cv=none; b=hRwzLuN+1pWobtTE33/kiijT2KX7Zgir1HCVrtNELkueXeg5RUlhEc/EUmFCTr/eD1I0cuth3mO1vIqF4rDnTZt8Og20QDqFTjKnqISz2POUFDkJLva8irX/OivATa0W1MwDy9ckdFUmfLbH8aE5PYPxAkg8uoevWdMVvY4jAVA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787383415; c=relaxed/simple; bh=RWNYz384e4rKemzcuA5opb+syrbmhY7THbxYU3MsYLY=; h=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References: MIME-Version; b=ocxKQCAMtZCyytNSRrX/y7SjGMJVmOMgC6+HRe9MAixXXzsdifwATXpRTpabXvhQ6iwdhfYsRjiiloy94PKcgsIrA0mwea92URny6bvyPRKjZMrUEmpaghKfdQ/AsQu6Ns8n7dClt+jU+ktQ8zwpm6wlr/2lHHXKK/6Xx/HgeY0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=ktIK5t4/; arc=none smtp.client-ip=209.85.218.50 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="ktIK5t4/" Received: by mail-ej1-f50.google.com with SMTP id a640c23a62f3a-c1c50c1e29bso287980166b.3 for ; Sat, 22 Aug 2026 00:23:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787383412; x=1787988212; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=2FueEl+ZcII/8wuXmKky1Fcrh7O6MxQGPP0G/0IKJwg=; b=ktIK5t4/DBb6lCHQrH95SfNnoXE0Olq/qs9qjRKup8OaOL+VshSBaBGKEVWZC58tQf 9PFPOtcRugZxLZC88HBhLaY/K0V+xw59svyhfsoqrd7duaTcBCUHkYdrxNDropwRzFij EH24+OYzA0j1qHuIehSNE1G7d61FwiWAINASe3POoCsV8V9mi7piXwAwJisUgaYfjDRc UOKLbhHAC3ifK8wEJrjAY9JH7ZyinnsWRcFFF5jR4LEeVvKs82QgGmEvdm82D4FptAJh MfxMtJQzspu+L7GX5AI4bbRgQdY0oiQ+5f4squBGerRIwKQWVytMSuajcTi27mA3ILTi qZPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787383412; x=1787988212; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=2FueEl+ZcII/8wuXmKky1Fcrh7O6MxQGPP0G/0IKJwg=; b=Hw/haVoMUdyz5SwoaGr66fUylKWmuG2nLYn7ZRVWOz1A83d8miGsqJkre5y4SAG72o l2JLadq6cFaD4mFxhzFteVkulEENJlC7p2xa35WsSpa9c86PS5SRXim8VoVoxp+eaWgc GI8E0EmYNPXuyHTl3SCJC6X3r0D2S72hhcMkyj2TY5dQ+eZS3n5k604FlB0qG+fxdHYq HsZi2dyAZVG4XKTQFlcx64cS7D/JL1nt0Ve8qRurGor7muNw79MlBK2BlUXwi44Syhpp pBC+hgRC+jDx4+pFzCwTQMEAQJYbVifpnBv7N/R0+1TMyTiBXOKhnowKMwhG4CHiZbK8 pTLA== X-Forwarded-Encrypted: i=1; AHgh+Rrp+dRPkvj9Mn2KpBWcnmIyUZg9uBwu5wdOKpxikhbygSHzCsO4YE1vXvNr8OdcPFqkAPUxGd1lSXc=@vger.kernel.org X-Gm-Message-State: AFuF++l/Jxyvdf/Fw1n8hdAny1Qysm/ncvJETMogzIPqWe675pm6IJbK lSbrDRD1Ju7TGvYVoCzPr+Z5aRN2n8nQZQsW53AiuG0SihnEDCCQVATX X-Gm-Gg: AR+sD10XlZq5AqiTLJ0zVpy3ek7Vlo9gflr2v/lXhOUKYR/qYP/xEzX9SY5cVobJ3+A A9cIv0Q9cdv7C0wTGdFNrkcVYMx+8QOewcHmsSK5R4jHPsRVF4o5GrleOehswzWwS9PNEItUpZ3 ZIHKqRAnciztHsZ90Lw7M3zQGH/y+6EbHOpxuEUMILlCZ2Ay8T5+Z3pIjWSVTbsj9+GDk/t5jNr rxeTL/s2GDAQjgcuhk0tDAWGfOOvbY1/9F0jh01Nc7kKJf2PTp3emzOQUEO+NYn0hppdBFGv51K XrFErMTzo+udJpMqN6EPYWFLQQgf0PlAouIZmRCvkxRxXSKThy9zxJ9P7D91GIXJ40doJAyAr2N AvZcAcK+p/IPj388gUiNtRhU2363bvJCzcOs6z0moEhrEodCGEt51vwf0w75AhW3UZvuFDFshGO ZOailEsyhL84Y3ji/T9Jogi7Fc5exKqd7ZsTWdXci2g8UGdvVuRsfPi6HYSm4WcTAGLsKVWVCzA N8ywMsxdsbXDQIpig1QsF0JWH5Khe9Npt+H+TPi3UiBnQZljuZlqFwmBG7nn+ITj9wneMljtcJP HttbaytIyK2jFB5P3h/RzQ6761AdDQSh80SNPRxwgxCncYdnfgUJyUaEZof6IJA3ZuO+f7krnQ= = X-Received: by 2002:a17:906:ba97:b0:c12:9b98:209e with SMTP id a640c23a62f3a-c246a692891mr1298531366b.23.1787383411862; Sat, 22 Aug 2026 00:23:31 -0700 (PDT) Received: from localhost.localdomain (dynamic-2a02-3100-a0f5-8c01-3de3-cd62-aa6f-2fb0.310.pool.telefonica.de. [2a02:3100:a0f5:8c01:3de3:cd62:aa6f:2fb0]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-c24966f6b48sm183689866b.33.2026.08.22.00.23.30 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Sat, 22 Aug 2026 00:23:31 -0700 (PDT) From: Karl Mehltretter To: Thomas Gleixner Cc: Karl Mehltretter , Gregory Price , Peter Zijlstra , Andy Lutomirski , Kees Cook , Joel Granados , Oleg Nesterov , Jonathan Corbet , Shuah Khan , Mark Brown , Stephen Rothwell , linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-next@vger.kernel.org Subject: [PATCH v2] syscall_user_dispatch: Use CONFIG_SYSCTL for sysctl guard Date: Sat, 22 Aug 2026 09:23:25 +0200 Message-Id: <20260822072325.51994-1-kmehltretter@gmail.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20260813062039.14567-1-kmehltretter@gmail.com> References: <20260813062039.14567-1-kmehltretter@gmail.com> Precedence: bulk X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Commit 8d75c338f0bc ("sysctl: remove CONFIG_PROC_SYSCTL, it just mirrors CONFIG_SYSCTL") removed CONFIG_PROC_SYSCTL, but the sysctl added by commit 5b6e32ba7b59 ("syscall_user_dispatch: Add kernel.syscall_user_dispatch sysctl") is still guarded by it. Now that both commits are merged, kernel.syscall_user_dispatch is no longer registered. syscall_user_dispatch_allowed defaults to true. SUD therefore remains available, but administrators cannot disable new activations. Use CONFIG_SYSCTL for the guard and documentation. Fixes: 5b6e32ba7b59 ("syscall_user_dispatch: Add kernel.syscall_user_dispatch sysctl") Assisted-by: Codex:gpt-5.6-sol Acked-by: Oleg Nesterov Reviewed-by: Joel Granados Signed-off-by: Karl Mehltretter --- Changes in v2: - Reword changelog and rebase onto mainline now that both commits are merged there (v7.2 is unaffected, it has neither commit). - Collected Acked-by/Reviewed-by tags from v1. No code change. v1: https://lore.kernel.org/all/20260813062039.14567-1-kmehltretter@gmail.com/ Documentation/admin-guide/sysctl/kernel.rst | 2 +- kernel/entry/syscall_user_dispatch.c | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Documentation/admin-guide/sysctl/kernel.rst b/Documentation/admin-guide/sysctl/kernel.rst index b6328cd0f43e..ffea61d448eb 100644 --- a/Documentation/admin-guide/sysctl/kernel.rst +++ b/Documentation/admin-guide/sysctl/kernel.rst @@ -1416,7 +1416,7 @@ Controls whether userspace may arm Syscall User Dispatch via == =================================================================== Only present when the kernel is built with ``CONFIG_SYSCALL_USER_DISPATCH`` -and ``CONFIG_PROC_SYSCTL``. +and ``CONFIG_SYSCTL``. sysctl_writes_strict diff --git a/kernel/entry/syscall_user_dispatch.c b/kernel/entry/syscall_user_dispatch.c index 2002c7aae435..59c861866941 100644 --- a/kernel/entry/syscall_user_dispatch.c +++ b/kernel/entry/syscall_user_dispatch.c @@ -178,7 +178,7 @@ int syscall_user_dispatch_set_config(struct task_struct *task, unsigned long siz (char __user *)(uintptr_t)cfg.selector); } -#ifdef CONFIG_PROC_SYSCTL +#ifdef CONFIG_SYSCTL static const struct ctl_table syscall_user_dispatch_sysctls[] = { { .procname = "syscall_user_dispatch", @@ -195,4 +195,4 @@ static int __init syscall_user_dispatch_sysctl_init(void) return 0; } late_initcall(syscall_user_dispatch_sysctl_init); -#endif /* CONFIG_PROC_SYSCTL */ +#endif /* CONFIG_SYSCTL */ base-commit: 26260251022fbc2f248a3d747a9b2b961b18d2d8 -- 2.39.5 (Apple Git-154)