[GIT PULL] seccomp updates for v5.19-rc1

Kees Cook
2022-05-23T19:32:21Z

Hi Linus,

Please pull these seccomp updates for v5.19-rc1.

Thanks!

-Kees

The following changes since commit 2bfed7d2ffa5d86c462d3e2067f2832eaf8c04c7:

selftests/seccomp: Don't call read() on TTY from background pgrp (2022-04-29 11:28:41 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.19-rc1

for you to fetch changes up to 5e91d2a4146946ea0abc984ca957f12b70632901:

selftests/seccomp: Fix spelling mistake "Coud" -> "Could" (2022-05-04 13:31:21 -0700)

----------------------------------------------------------------
seccomp updates for v5.19-rc1

- Rework USER_NOTIF notification ordering and kill logic (Sargun Dhillon)

- Improved PTRACE_O_SUSPEND_SECCOMP selftest (Jann Horn)

- Gracefully handle failed unshare() in selftests (Yang Guang)

- Spelling fix (Colin Ian King)

----------------------------------------------------------------
Colin Ian King (1):
selftests/seccomp: Fix spelling mistake "Coud" -> "Could"

Jann Horn (1):
selftests/seccomp: Test PTRACE_O_SUSPEND_SECCOMP without CAP_SYS_ADMIN

Sargun Dhillon (5):
seccomp: Use FIFO semantics to order notifications
selftests/seccomp: Ensure that notifications come in FIFO order
seccomp: Add wait_killable semantic to seccomp user notifier
selftests/seccomp: Refactor get_proc_stat to split out file reading code
selftests/seccomp: Add test for wait killable notifier

Yang Guang (1):
selftests/seccomp: Add SKIP for failed unshare()

Documentation/userspace-api/seccomp_filter.rst | 10 +
include/linux/seccomp.h | 3 +-
include/uapi/linux/seccomp.h | 2 +
kernel/seccomp.c | 44 ++-
tools/testing/selftests/seccomp/Makefile | 1 +
tools/testing/selftests/seccomp/seccomp_bpf.c | 427 ++++++++++++++++++++++++-
6 files changed, 482 insertions(+), 5 deletions(-)

--
Kees Cook