arm64: add seccomp support

Browse source

secure_computing() is called first in syscall_trace_enter() so that
a system call will be aborted quickly without doing succeeding syscall
tracing if seccomp rules want to deny that system call.

On compat task, syscall numbers for system calls allowed in seccomp mode 1
are different from those on normal tasks, and so _NR_seccomp_xxx_32's need
to be redefined.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Signed-off-by: Will Deacon <will.deacon@arm.com>

...

This commit is contained in:

AKASHI Takahiro 2014-11-28 05:26:39 +00:00 • committed by Will Deacon

parent cc5e9097c9

commit a1ae65b219

4 changed files with 47 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

14

arch/arm64/Kconfig

View file

25

arch/arm64/include/asm/seccomp.h

View file

3

arch/arm64/include/asm/unistd.h

View file

5

arch/arm64/kernel/ptrace.c

View file