seccomp: Enable speculation flaw mitigations

Browse source

When speculation flaw mitigations are opt-in (via prctl), using seccomp
will automatically opt-in to these protections, since using seccomp
indicates at least some level of sandboxing is desired.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

...

This commit is contained in:

Kees Cook 2018-05-01 15:07:31 -07:00 • committed by Thomas Gleixner

parent fae1fa0fc6

commit 5c3070890d

1 changed files with 17 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

17

kernel/seccomp.c

View file