From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id DFF17C3A5A6 for ; Wed, 28 Aug 2019 17:52:09 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id B81E622CF8 for ; Wed, 28 Aug 2019 17:52:09 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=amacapital-net.20150623.gappssmtp.com header.i=@amacapital-net.20150623.gappssmtp.com header.b="XhlIuiCr" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726981AbfH1RwJ (ORCPT ); Wed, 28 Aug 2019 13:52:09 -0400 Received: from mail-pf1-f194.google.com ([209.85.210.194]:35853 "EHLO mail-pf1-f194.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726872AbfH1RwI (ORCPT ); Wed, 28 Aug 2019 13:52:08 -0400 Received: by mail-pf1-f194.google.com with SMTP id w2so282023pfi.3 for ; Wed, 28 Aug 2019 10:52:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amacapital-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=jQX3yoLyPfk/0j+lt93BtL/GBDo4w3swgacBIDakXXQ=; b=XhlIuiCrJiPd178mhAYLbMaCFhZdbbqbwaKU3q6uJ30qMagqqTw/bFQdZlNUymLTK8 dAlhmcyR3vP0ZtDqdiHYyudCImcd6mGVQj44mv4tr0vwZxX8d6TFobwdN4uxlZ1uDl/t X/kt1Ft483Gh0bH+NGznab4xcFdJ/6TYS+9Yo3rpExBYeqGDHZD6RaHPArHNC3kr2rgJ NxILOLue3/+PKN00bZKV+tNBQ8D4tNvwKWRAPKMbVtIL1UD4Gr4sqUnHjy2NZtrlK7hv Jg6WoKH+rCjRnSUQMig8d9M/n0qExNh5AHuPyAICyXxTEnIuGS65lVHCT01gHzZmPOSt MLHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=jQX3yoLyPfk/0j+lt93BtL/GBDo4w3swgacBIDakXXQ=; b=M6KxcwVxzKNzB4YjqDXpO178R21KXila/DM8EnoK5BUrOtWv5Ja3ofreBu89aV2OB0 gg0+tebDTkzK18Svs2lrweXLmpuO6DaodLrtBBglSWDQnKJdfuUr6CVEsmutgxuC3B7D BMuUt0OttrmNE4ndtolqOH3UcLxjt+0JqNhhFjstmSdyVoJH+5da+YiHwybD0J5Vp9qE 8hlj8k5u4Vndu3IElEvFHH42AS7sE1eJH6GqKbgqxUVX6/ZLsG2GoXTJ04MruVJTX4U2 PJJzIs9652j6enj/R83b1LVUKROb3i/o0oA5ujAfM8oEjpZbtSVDNRBs/lvhPlmHU4Kt siFg== X-Gm-Message-State: APjAAAWZPugG34O4CC5bok59X4Au7q0atiIMXKlkgE00j4g8p9hO2Fiy +m3PFsow8Kgdyo/EahVLSG//ug== X-Google-Smtp-Source: APXvYqxOrLR3mQwFe9lP+xvQ8UaEwRlRzDb4ILg8zRF5qtKWo+EbZYY96fc4AyXGZBZM2GL8Qh83Qw== X-Received: by 2002:a17:90a:9905:: with SMTP id b5mr2493871pjp.117.1567014727512; Wed, 28 Aug 2019 10:52:07 -0700 (PDT) Received: from ?IPv6:2600:1012:b023:28ef:14c8:9cc:b602:d8f? ([2600:1012:b023:28ef:14c8:9cc:b602:d8f]) by smtp.gmail.com with ESMTPSA id x10sm2728615pjo.4.2019.08.28.10.52.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Aug 2019 10:52:06 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) Subject: Re: [PATCH v2] riscv: add support for SECCOMP and SECCOMP_FILTER From: Andy Lutomirski X-Mailer: iPhone Mail (16G77) In-Reply-To: <201908251451.73C6812E8@keescook> Date: Wed, 28 Aug 2019 10:52:05 -0700 Cc: David Abdurachmanov , Paul Walmsley , Palmer Dabbelt , Albert Ou , Oleg Nesterov , Will Drewry , Shuah Khan , Alexei Starovoitov , Daniel Borkmann , Martin KaFai Lau , Song Liu , Yonghong Song , David Abdurachmanov , Thomas Gleixner , Allison Randal , Alexios Zavras , Anup Patel , Vincent Chen , Alan Kao , linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, netdev@vger.kernel.org, bpf@vger.kernel.org, me@carlosedp.com Content-Transfer-Encoding: quoted-printable Message-Id: <419CB0D1-E51C-49D5-9745-7771C863462F@amacapital.net> References: <20190822205533.4877-1-david.abdurachmanov@sifive.com> <201908251451.73C6812E8@keescook> To: Kees Cook Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org > On Aug 25, 2019, at 2:59 PM, Kees Cook wrote: >=20 >> On Thu, Aug 22, 2019 at 01:55:22PM -0700, David Abdurachmanov wrote: >> This patch was extensively tested on Fedora/RISCV (applied by default on >> top of 5.2-rc7 kernel for <2 months). The patch was also tested with 5.3-= rc >> on QEMU and SiFive Unleashed board. >=20 > Oops, I see the mention of QEMU here. Where's the best place to find > instructions on creating a qemu riscv image/environment? I don=E2=80=99t suppose one of you riscv folks would like to contribute risc= v support to virtme? virtme-run =E2=80=94arch=3Driscv would be quite nice, a= nd the total patch should be just a couple lines. Unfortunately, it helps a= lot to understand the subtleties of booting the architecture to write those= couple lines :) From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 89FBFC3A5A6 for ; Wed, 28 Aug 2019 17:52:12 +0000 (UTC) Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 61B0B233A1 for ; Wed, 28 Aug 2019 17:52:12 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="SuQ5ybKP"; dkim=fail reason="signature verification failed" (2048-bit key) header.d=amacapital-net.20150623.gappssmtp.com header.i=@amacapital-net.20150623.gappssmtp.com header.b="XhlIuiCr" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 61B0B233A1 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=amacapital.net Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-riscv-bounces+infradead-linux-riscv=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:Cc:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:To:References:Message-Id:Date: In-Reply-To:From:Subject:Mime-Version:Reply-To:Content-ID:Content-Description :Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=CebnI2O4RLciwuQy+vmGf4WStb1nWJIw54lAy40zqKw=; b=SuQ5ybKPfdU23e IUiTYvSxmp6yGOqpr2cvCDQ5QsD0h7u7xX8zP4d0LwzT0ciIaQCr8GEaeHtBXZe4pwN5fuR5OqG0h Eoohs/QF2Cf+7FY+RW0VfOxMLtkO77Y9kYVfQlP7YHjZeK1cn254j4axymVBxqqwvdCj6b9M8C3iM +yhRgjKT9hoO4xsP6grLrrg2lUncRDWqoHjWLifnifNDbBiH2Su2drHaTp9yG5F2KzM+dMsGIWcs1 pM9eFsEkLQRBDyeDhmYFxXCOuQsSfWpbj4u3ygeh9d5FOII5AI5ly8fkB/W/sSsQ/gzAgzXGpyvZ1 1BdNb5YOBc4FSKgZE1gA==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.92 #3 (Red Hat Linux)) id 1i3279-00087c-K0; Wed, 28 Aug 2019 17:52:11 +0000 Received: from mail-pg1-x543.google.com ([2607:f8b0:4864:20::543]) by bombadil.infradead.org with esmtps (Exim 4.92 #3 (Red Hat Linux)) id 1i3277-000876-3S for linux-riscv@lists.infradead.org; Wed, 28 Aug 2019 17:52:10 +0000 Received: by mail-pg1-x543.google.com with SMTP id u17so123185pgi.6 for ; Wed, 28 Aug 2019 10:52:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amacapital-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=jQX3yoLyPfk/0j+lt93BtL/GBDo4w3swgacBIDakXXQ=; b=XhlIuiCrJiPd178mhAYLbMaCFhZdbbqbwaKU3q6uJ30qMagqqTw/bFQdZlNUymLTK8 dAlhmcyR3vP0ZtDqdiHYyudCImcd6mGVQj44mv4tr0vwZxX8d6TFobwdN4uxlZ1uDl/t X/kt1Ft483Gh0bH+NGznab4xcFdJ/6TYS+9Yo3rpExBYeqGDHZD6RaHPArHNC3kr2rgJ NxILOLue3/+PKN00bZKV+tNBQ8D4tNvwKWRAPKMbVtIL1UD4Gr4sqUnHjy2NZtrlK7hv Jg6WoKH+rCjRnSUQMig8d9M/n0qExNh5AHuPyAICyXxTEnIuGS65lVHCT01gHzZmPOSt MLHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=jQX3yoLyPfk/0j+lt93BtL/GBDo4w3swgacBIDakXXQ=; b=cdHCowrovQokNhyDFyRJykHH6EI3dMHALtltCPlirbPT4O7zjZKkdOrkCbYVvaqGc7 MKE0gicJ5n6kmFsZnF38GJFo6jsP9xehI3+EhqCRIz9pcex8G+kk7rM8kA0BIWWxPz9n lGeKXZqO5fIsrxfDUAku4T9l07g9OhumbAXScmf/SO4QcjJeWb5XmmbFX9hhcgfEXnBc TP1rVMnk0hdRlhAeYp5bI6x5uxs6+T1MmnIvy1wgNQLEnW3PvaUKIjv2aV8YKkdvpSzQ riK3RHRjmjv2N8pVwZ1x78Utbw+SA07likf1dcNJ2L59DzDgEUmlYq+k5u4VIRG/Oypl xrSg== X-Gm-Message-State: APjAAAXlHmCrPvlH1IgIgImvJedSHS4Tl2eEZy+62e5Bphi0/CeqmjIX foVkdrnK/5SiFLuOd7/dnqO8+s+7NCk= X-Google-Smtp-Source: APXvYqxOrLR3mQwFe9lP+xvQ8UaEwRlRzDb4ILg8zRF5qtKWo+EbZYY96fc4AyXGZBZM2GL8Qh83Qw== X-Received: by 2002:a17:90a:9905:: with SMTP id b5mr2493871pjp.117.1567014727512; Wed, 28 Aug 2019 10:52:07 -0700 (PDT) Received: from ?IPv6:2600:1012:b023:28ef:14c8:9cc:b602:d8f? ([2600:1012:b023:28ef:14c8:9cc:b602:d8f]) by smtp.gmail.com with ESMTPSA id x10sm2728615pjo.4.2019.08.28.10.52.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Aug 2019 10:52:06 -0700 (PDT) Mime-Version: 1.0 (1.0) Subject: Re: [PATCH v2] riscv: add support for SECCOMP and SECCOMP_FILTER From: Andy Lutomirski X-Mailer: iPhone Mail (16G77) In-Reply-To: <201908251451.73C6812E8@keescook> Date: Wed, 28 Aug 2019 10:52:05 -0700 Message-Id: <419CB0D1-E51C-49D5-9745-7771C863462F@amacapital.net> References: <20190822205533.4877-1-david.abdurachmanov@sifive.com> <201908251451.73C6812E8@keescook> To: Kees Cook X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20190828_105209_281694_4F680C0C X-CRM114-Status: GOOD ( 11.52 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Song Liu , Alan Kao , Palmer Dabbelt , Alexei Starovoitov , Oleg Nesterov , linux-kselftest@vger.kernel.org, linux-riscv@lists.infradead.org, Shuah Khan , Daniel Borkmann , Yonghong Song , me@carlosedp.com, Albert Ou , Alexios Zavras , Paul Walmsley , Thomas Gleixner , Allison Randal , Will Drewry , David Abdurachmanov , David Abdurachmanov , netdev@vger.kernel.org, Anup Patel , linux-kernel@vger.kernel.org, Vincent Chen , bpf@vger.kernel.org, Martin KaFai Lau Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-riscv" Errors-To: linux-riscv-bounces+infradead-linux-riscv=archiver.kernel.org@lists.infradead.org Cgo+IE9uIEF1ZyAyNSwgMjAxOSwgYXQgMjo1OSBQTSwgS2VlcyBDb29rIDxrZWVzY29va0BjaHJv bWl1bS5vcmc+IHdyb3RlOgo+IAo+PiBPbiBUaHUsIEF1ZyAyMiwgMjAxOSBhdCAwMTo1NToyMlBN IC0wNzAwLCBEYXZpZCBBYmR1cmFjaG1hbm92IHdyb3RlOgo+PiBUaGlzIHBhdGNoIHdhcyBleHRl bnNpdmVseSB0ZXN0ZWQgb24gRmVkb3JhL1JJU0NWIChhcHBsaWVkIGJ5IGRlZmF1bHQgb24KPj4g dG9wIG9mIDUuMi1yYzcga2VybmVsIGZvciA8MiBtb250aHMpLiBUaGUgcGF0Y2ggd2FzIGFsc28g dGVzdGVkIHdpdGggNS4zLXJjCj4+IG9uIFFFTVUgYW5kIFNpRml2ZSBVbmxlYXNoZWQgYm9hcmQu Cj4gCj4gT29wcywgSSBzZWUgdGhlIG1lbnRpb24gb2YgUUVNVSBoZXJlLiBXaGVyZSdzIHRoZSBi ZXN0IHBsYWNlIHRvIGZpbmQKPiBpbnN0cnVjdGlvbnMgb24gY3JlYXRpbmcgYSBxZW11IHJpc2N2 IGltYWdlL2Vudmlyb25tZW50PwoKSSBkb27igJl0IHN1cHBvc2Ugb25lIG9mIHlvdSByaXNjdiBm b2xrcyB3b3VsZCBsaWtlIHRvIGNvbnRyaWJ1dGUgcmlzY3Ygc3VwcG9ydCB0byB2aXJ0bWU/ICB2 aXJ0bWUtcnVuIOKAlGFyY2g9cmlzY3Ygd291bGQgYmUgcXVpdGUgbmljZSwgYW5kIHRoZSB0b3Rh bCBwYXRjaCBzaG91bGQgYmUganVzdCBhIGNvdXBsZSBsaW5lcy4gIFVuZm9ydHVuYXRlbHksIGl0 IGhlbHBzIGEgbG90IHRvIHVuZGVyc3RhbmQgdGhlIHN1YnRsZXRpZXMgb2YgYm9vdGluZyB0aGUg YXJjaGl0ZWN0dXJlIHRvIHdyaXRlIHRob3NlIGNvdXBsZSBsaW5lcyA6KQoKCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCmxpbnV4LXJpc2N2IG1haWxpbmcg bGlzdApsaW51eC1yaXNjdkBsaXN0cy5pbmZyYWRlYWQub3JnCmh0dHA6Ly9saXN0cy5pbmZyYWRl YWQub3JnL21haWxtYW4vbGlzdGluZm8vbGludXgtcmlzY3YK