* [GIT PULL] seccomp fixes for v5.17-rc4
@ 2022-02-12 3:02 Kees Cook
2022-02-12 17:17 ` pr-tracker-bot
0 siblings, 1 reply; 2+ messages in thread
From: Kees Cook @ 2022-02-12 3:02 UTC (permalink / raw)
To: Linus Torvalds
Cc: linux-kernel, Andy Lutomirski, Eric W. Biederman, Kees Cook,
Robert Święcki, Will Drewry
Hi Linus,
Please pull these signal and seccomp fixes for v5.17-rc4. This fixes a
corner case of fatal SIGSYS being ignored since v5.15. Along with the
signal fix is a change to seccomp so that seeing another syscall after
a fatal filter result will cause seccomp to kill the process harder.
Thanks!
-Kees
The following changes since commit 26291c54e111ff6ba87a164d85d4a4e134b7315c:
Linux 5.17-rc2 (2022-01-30 15:37:07 +0200)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.17-rc4
for you to fetch changes up to eed09ad261822a7bdc441ed192c6f444375e5527:
samples/seccomp: Adjust sample to also provide kill option (2022-02-10 19:09:12 -0800)
----------------------------------------------------------------
seccomp fixes for v5.17-rc4
- Force HANDLER_EXIT even for SIGNAL_UNKILLABLE.
- Make seccomp self-destruct after fatal filter results.
- Update seccomp samples for easier behavioral demonstration.
----------------------------------------------------------------
Kees Cook (3):
signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE
seccomp: Invalidate seccomp mode to catch death failures
samples/seccomp: Adjust sample to also provide kill option
kernel/seccomp.c | 10 ++++++++++
kernel/signal.c | 5 +++--
samples/seccomp/dropper.c | 9 +++++++--
3 files changed, 20 insertions(+), 4 deletions(-)
--
Kees Cook
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [GIT PULL] seccomp fixes for v5.17-rc4
2022-02-12 3:02 [GIT PULL] seccomp fixes for v5.17-rc4 Kees Cook
@ 2022-02-12 17:17 ` pr-tracker-bot
0 siblings, 0 replies; 2+ messages in thread
From: pr-tracker-bot @ 2022-02-12 17:17 UTC (permalink / raw)
To: Kees Cook
Cc: Linus Torvalds, linux-kernel, Andy Lutomirski, Eric W. Biederman,
Kees Cook, Robert Święcki, Will Drewry
The pull request you sent on Fri, 11 Feb 2022 19:02:38 -0800:
> https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.17-rc4
has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/eef8cffcaba8f1498ec32f55c859b883315232ad
Thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-02-12 17:17 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-02-12 3:02 [GIT PULL] seccomp fixes for v5.17-rc4 Kees Cook
2022-02-12 17:17 ` pr-tracker-bot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.