[GIT PULL] seccomp updates for v5.19-rc1

[Kees Cook <keescook@chromium.org>]

Hi Linus,

Please pull these seccomp updates for v5.19-rc1.

Thanks!

-Kees

The following changes since commit 2bfed7d2ffa5d86c462d3e2067f2832eaf8c04c7:

  selftests/seccomp: Don't call read() on TTY from background pgrp (2022-04-29 11:28:41 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.19-rc1

for you to fetch changes up to 5e91d2a4146946ea0abc984ca957f12b70632901:

  selftests/seccomp: Fix spelling mistake "Coud" -> "Could" (2022-05-04 13:31:21 -0700)

----------------------------------------------------------------
seccomp updates for v5.19-rc1

- Rework USER_NOTIF notification ordering and kill logic (Sargun Dhillon)

- Improved PTRACE_O_SUSPEND_SECCOMP selftest (Jann Horn)

- Gracefully handle failed unshare() in selftests (Yang Guang)

- Spelling fix (Colin Ian King)

----------------------------------------------------------------
Colin Ian King (1):
      selftests/seccomp: Fix spelling mistake "Coud" -> "Could"

Jann Horn (1):
      selftests/seccomp: Test PTRACE_O_SUSPEND_SECCOMP without CAP_SYS_ADMIN

Sargun Dhillon (5):
      seccomp: Use FIFO semantics to order notifications
      selftests/seccomp: Ensure that notifications come in FIFO order
      seccomp: Add wait_killable semantic to seccomp user notifier
      selftests/seccomp: Refactor get_proc_stat to split out file reading code
      selftests/seccomp: Add test for wait killable notifier

Yang Guang (1):
      selftests/seccomp: Add SKIP for failed unshare()

 Documentation/userspace-api/seccomp_filter.rst |  10 +
 include/linux/seccomp.h                        |   3 +-
 include/uapi/linux/seccomp.h                   |   2 +
 kernel/seccomp.c                               |  44 ++-
 tools/testing/selftests/seccomp/Makefile       |   1 +
 tools/testing/selftests/seccomp/seccomp_bpf.c  | 427 ++++++++++++++++++++++++-
 6 files changed, 482 insertions(+), 5 deletions(-)

-- 
Kees Cook