From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753250AbbJGJq7 (ORCPT ); Wed, 7 Oct 2015 05:46:59 -0400 Received: from mail-wi0-f181.google.com ([209.85.212.181]:35649 "EHLO mail-wi0-f181.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752425AbbJGJqz (ORCPT ); Wed, 7 Oct 2015 05:46:55 -0400 From: Tycho Andersen To: Kees Cook Cc: Alexei Starovoitov , Will Drewry , Oleg Nesterov , Andy Lutomirski , Pavel Emelyanov , "Serge E. Hallyn" , Daniel Borkmann , linux-kernel@vger.kernel.org, linux-api@vger.kernel.org Subject: v6 of seccomp filter c/r Date: Wed, 7 Oct 2015 10:46:18 +0100 Message-Id: <1444211179-24925-1-git-send-email-tycho.andersen@canonical.com> X-Mailer: git-send-email 2.5.0 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi all, Here's v6 of the seccomp filter c/r stuff. I've dropped the concept of a seccomp fd entirely, in favor of just dumping the bpf data. This doesn't allow us to restore correctly in all cases, though, as noted in the patch notes. Note that this is now based on http://patchwork.ozlabs.org/patch/525492/ and will need to be built with that patch applied. This gets rid of two incorrect patches in a previous series and is a nicer API. Thoughts welcome, Tycho