seccomp: Selftest for detection of filter flag support

Browse source

Userspace needs to be able to reliably detect the support of a filter
flag. A good way of doing that is by attempting to enter filter mode,
with the flag bit(s) in question set, and a NULL pointer for the args
parameter of seccomp(2). EFAULT indicates that the flag is valid and
EINVAL indicates that the flag is invalid.

This patch adds a selftest that can be used to test this method of
detection in userspace.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Signed-off-by: Kees Cook <keescook@chromium.org>

...

This commit is contained in:

Tyler Hicks 2017-08-11 04:33:55 +00:00 • committed by Kees Cook

parent 0ddec0fc89

commit 2b7ea5b5b5

1 changed files with 60 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

60

tools/testing/selftests/seccomp/seccomp_bpf.c

View file