From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 753EBC11F64 for ; Mon, 28 Jun 2021 19:11:33 +0000 (UTC) Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id AE3A361C8C for ; Mon, 28 Jun 2021 19:11:30 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org AE3A361C8C Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=weissschuh.net Authentication-Results: mail.kernel.org; spf=tempfail smtp.mailfrom=linux-audit-bounces@redhat.com Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-488-7UCCbpnNNQiQHN_17BcdeQ-1; Mon, 28 Jun 2021 15:10:07 -0400 X-MC-Unique: 7UCCbpnNNQiQHN_17BcdeQ-1 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id CAC6D89F92F; Mon, 28 Jun 2021 19:09:56 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.20]) by smtp.corp.redhat.com (Postfix) with ESMTPS id BDB4B6267C; Mon, 28 Jun 2021 19:09:55 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id 777171809C99; Mon, 28 Jun 2021 19:09:54 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 15SHx5Mq019847 for ; Mon, 28 Jun 2021 13:59:05 -0400 Received: by smtp.corp.redhat.com (Postfix) id 0FF4B9D44; Mon, 28 Jun 2021 17:59:05 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast03.extmail.prod.ext.rdu2.redhat.com [10.11.55.19]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 0B4546E1D6 for ; Mon, 28 Jun 2021 17:59:00 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-2.mimecast.com [207.211.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id CF082802700 for ; Mon, 28 Jun 2021 17:59:00 +0000 (UTC) Received: from todd.t-8ch.de (todd.t-8ch.de [159.69.126.157]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-97-OmxJKFVfPH-gbYJ8EKcd2w-1; Mon, 28 Jun 2021 13:58:58 -0400 X-MC-Unique: OmxJKFVfPH-gbYJ8EKcd2w-1 Date: Mon, 28 Jun 2021 19:58:52 +0200 From: Thomas =?utf-8?Q?Wei=C3=9Fschuh?= To: Paul Moore Subject: Re: AUDIT_ARCH_ and __NR_syscall constants for seccomp filters Message-ID: References: <0b926f59-464d-4b67-8f32-329cf9695cf7@t-8ch.de> <696bf938-c9d2-4b18-9f53-b6ff27035a97@t-8ch.de> MIME-Version: 1.0 In-Reply-To: X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.79 on 10.11.54.5 X-MIME-Autoconverted: from quoted-printable to 8bit by lists01.pubmisc.prod.ext.phx2.redhat.com id 15SHx5Mq019847 X-loop: linux-audit@redhat.com X-Mailman-Approved-At: Mon, 28 Jun 2021 15:09:53 -0400 Cc: bpf@vger.kernel.org, linux-audit@redhat.com X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=linux-audit-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Disposition: inline Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgYWdhaW4hCgpPbiBNbywgMjAyMS0wNi0yOFQxMzozNC0wNDAwLCBQYXVsIE1vb3JlIHdyb3Rl Ogo+IE9uIE1vbiwgSnVuIDI4LCAyMDIxIGF0IDE6MTMgUE0gVGhvbWFzIFdlacOfc2NodWggPGxp bnV4QHdlaXNzc2NodWgubmV0PiB3cm90ZToKPiA+IE9uIE1vLCAyMDIxLTA2LTI4VDEyOjU5LTA0 MDAsIFBhdWwgTW9vcmUgd3JvdGU6Cj4gPiA+IE9uIE1vbiwgSnVuIDI4LCAyMDIxIGF0IDk6MjUg QU0gVGhvbWFzIFdlacOfc2NodWggPGxpbnV4QHdlaXNzc2NodWgubmV0PiB3cm90ZToKPiA+ID4g Pgo+ID4gPiA+IEhpIGV2ZXJ5b25lLAo+ID4gPiA+Cj4gPiA+ID4gdGhlcmUgZG9lcyBub3Qgc2Vl bSB0byBiZSBhIHdheSB0byBhY2Nlc3MgdGhlIEFVRElUX0FSQ0hfIGNvbnN0YW50IHRoYXQgbWF0 Y2hlcwo+ID4gPiA+IHRoZSBjdXJyZW50bHkgdmlzaWJsZSBzeXNjYWxsIG51bWJlcnMgKF9fTlJf Li4uKSBmcm9tIHRoZSBrZXJuZWwgdWFwaSBoZWFkZXJzLgo+ID4gPgo+ID4gPiBMb29raW5nIGF0 IExpbnVzJyBjdXJyZW50IHRyZWUgSSBzZWUgdGhlIEFVRElUX0FSQ0hfKiBkZWZpbmVzIGluCj4g PiA+IGluY2x1ZGUvdWFwaS9saW51eC9hdWRpdC5oOyBsb29raW5nIG9uIG15IHN5c3RlbSByaWdo dCBub3cgSSBzZWUgdGhlCj4gPiA+IGRlZmluZXMgaW4gL3Vzci9pbmNsdWRlL2xpbnV4L2F1ZGl0 LmguICBXaGF0IGtlcm5lbCByZXBvc2l0b3J5IGFuZAo+ID4gPiBkaXN0cmlidXRpb24gYXJlIHlv dSB1c2luZz8KPiA+Cj4gPiBJIGFtIHVzaW5nIEFyY2hMaW51eCBhbmQgYWxzbyBoYXZlIGFsbCB0 aGVzZSBkZWZpbmVzLgo+ID4KPiA+ID4gPiBRdWVzdGlvbnM6Cj4gPiA+ID4KPiA+ID4gPiBJcyBp dCByZWFsbHkgbmVjZXNzYXJ5IHRvIHZhbGlkYXRlIHRoZSBhcmNoIHZhbHVlIHdoZW4gc3lzY2Fs bCBudW1iZXJzIGFyZQo+ID4gPiA+IGFscmVhZHkgdGFyZ2V0LXNwZWNpZmljPwo+ID4gPiA+IChJ ZiBub3QsIHNob3VsZCB0aGlzIGJlIGFkZGVkIHRvIHRoZSBkb2NzPykKPiA+ID4KPiA+ID4gQ2hl Y2tpbmcgdGhlIGFyY2gvQUJJIHZhbHVlIGlzIGltcG9ydGFudCBzbyB0aGF0IHlvdSBjYW4gZW5z dXJlIHRoYXQKPiA+ID4geW91IGFyZSB1c2luZyB0aGUgc3lzY2FsbCBudW1iZXIgaW4gdGhlIHBy b3BlciBjb250ZXh0LiAgRm9yIGV4YW1wbGUsCj4gPiA+IGxvb2sgYXQgdGhlIGFjY2VzcygyKSBz eXNjYWxsOiBpdCBpcyB1bmRlZmluZWQgb24gc29tZSBBQklzIGFuZCBjYW4KPiA+ID4gdGFrZSBl aXRoZXIgYSB2YWx1ZSBvZiAyMCwgMjEsIG9yIDMzIGRlcGVuZGluZyBvbiB0aGUgYXJjaC9BQkku Cj4gPiA+IFVuZm9ydHVuYXRlbHkgdGhpcyBpcyByYXRoZXIgY29tbW9uLgo+ID4KPiA+IEJ1dCB3 aGVuIGlmIEkgYW0gbm90IGhhcmRjb2RpbmcgdGhlIHN5c2NhbGwgbnVtYmVycyBidXQgdXNlIHRo ZQo+ID4gX19OUl9hY2Nlc3Mga2VybmVsIGRlZmluZSB0aGVuIEkgc2hvdWxkIGFsd2F5cyBnZXQg dGhlIGNvcnJlY3QgbnVtYmVyIGZvciB0aGUKPiA+IEFCSSBJIGFtIGNvbXBpbGluZyBmb3IgKG9y IGFuIGVycm9yIGlmIHRoZSBzeXNjYWxsIGRvZXMgbm90IGV4aXN0KSwgbm8/Cj4gCj4gUmVtZW1i ZXIgdGhhdCBzZWNjb21wIGZpbHRlcnMgYXJlIGluaGVyaXRlZCBhY3Jvc3MgZm9ya3MsIHNvIGlm IHlvdXIKPiBhcHBsaWNhdGlvbiBsb2FkcyBhbiBBQkkgc3BlY2lmaWMgZmlsdGVyIGFuZCB0aGVu IGZvcmsoKS9leGVjKCkncyBhbgo+IGFwcGxpY2F0aW9uIHdpdGggYSBkaWZmZXJlbnQgQUJJIHlv dSBjb3VsZCBiZSBpbiB0cm91YmxlLiAgV2Ugc2F3IHRoaXMKPiBzb21lIHllYXJzIGFnbyB3aGVu IHBlb3BsZSBzdGFydGVkIHJ1bm5pbmcgY29udGFpbmVycyB3aXRoIEFCSXMgb3RoZXIKPiB0aGFu IHRoZSBuYXRpdmUgc3lzdGVtOyBpZiB0aGUgY29udGFpbmVyIG9yY2hlc3RyYXRvciBkaWRuJ3Qg bG9hZCBhCj4gZmlsdGVyIHRoYXQga25ldyBhYm91dCB0aGVzZSBub24tbmF0aXZlIEFCSXMgQmFk IFRoaW5ncyBoYXBwZW5lZC4KCk15IGFwcGxpY2F0aW9uIHdpbGwgbm90IGJlIGFibGUgdG8gc3Bh d24gYW55IG5ldyBwcm9jZXNzZXMuCkl0IGlzIGxpbWl0ZWQgdG8gd3JpdGUoKSBhbmQgZXhpdCgp LgpBbHNvIHRoaXMgaXMgYSBsb3ctbGV2ZWwgc3lzdGVtIGFwcGxpY2F0aW9uIHNvIGl0IHNob3Vs ZCBhbHdheXMgYmUgY29tcGlsZWQgZm9yCnRoZSBuYXRpdmUgQUJJLgpTbyB0aGlzIHNob3VsZCBu b3QgYmUgYW4gaXNzdWUuCgo+IEknbSBzdXJlIHlvdSBhcmUgYWxyZWFkeSBhd2FyZSBvZiBsaWJz ZWNjb21wLCBidXQgaWYgbm90IHlvdSBtYXkgd2FudAo+IHRvIGNvbnNpZGVyIGl0IGZvciB5b3Vy IGFwcGxpY2F0aW9uLiAgTm90IG9ubHkgZG9lcyBpdCBwcm92aWRlIGEgc2FmZQo+IGFuZCBlYXN5 IHdheSB0byBoYW5kbGUgbXVsdGlwbGUgQUJJcyBpbiBhIHNpbmdsZSBmaWx0ZXIsIGl0IGhhbmRs ZXMKPiBvdGhlciBzZWNjb21wIHByb2JsZW0gYXJlYXMgbGlrZSBidWlsZC9ydW50aW1lIHN5c3Rl bSBkaWZmZXJlbmNlcyBpbgo+IHRoZSBzeXNjYWxsIHRhYmxlcy9kZWZpbmVzIGFzIHdlbGwgYXMg dGhlIG9kZGJhbGwgbmF0dXJlIG9mCj4gZGlyZWN0LWNhbGwgYW5kIG11bHRpcGxleGVkIHNvY2tl dCByZWxhdGVkIHN5c2NhbGxzLCBpLmUuIHNvY2tldGNhbGwoKQo+IHZzIHNvY2tldCgpLCBldGMu CgpGb3IgYSBsYXJnZXIgYXBwbGljYXRpb24gdGhpcyB3b3VsZCBiZSBpbmRlZWQgbXkgY2hvaWNl LgpCdXQgZm9yIGEgc21hbGwgYXBwbGljYXRpb24gbGlrZSBtaW5lIEkgZG9uJ3QgdGhpbmsgaXQg aXMgd29ydGggaXQuCmxpYnNlY2NvbXAgZm9yIGV4YW1wbGUgZG9lcyBwcm92aWRlIGEgd2F5IHRv IGdldCB0aGUgbmF0aXZlIGF1ZGl0IGFyY2g6CmB1aW50MzJfdCBzZWNjb21wX2FyY2hfbmF0aXZl KHZvaWQpO2AuIEl0IGlzIGltcGxlbWVudGVkIGJ5IGlmZGVmLWluZyBvbgp2YXJpb3VzIGNvbXBp bGVyIGRlZmluZXMgdG8gZGV0ZWN0IHRoZSBBQkkgY29tcGlsZWQgZm9yLgoKSSdkIGxpa2UgdGhl IGtlcm5lbCB0byBwcm92aWRlIHRoaXMgb3V0LW9mLXRoZSBib3gsIHNvIEkgZG9uJ3QgaGF2ZSB0 byBoYXZlIHRoZQpzYW1lIGlmZGVmcyBpbiBteSBhcHBsaWNhdGlvbihzKSBhbmQga2VlcCB0aGVt IHVwIHRvIGRhdGUuCgpJIGZvdW5kIHRoYXQgdGhlIGtlcm5lbCBpbnRlcm5hbGx5IGFscmVhZHkg aGFzIGEgZGVmaW5pdGlvbiBmb3IgbXkgdXNlY2FzZToKU0VDQ09NUF9BUkNIX05BVElWRS4KSXQg aXMganVzdCBub3QgZXhwb3J0ZWQgdG8gdXNlcnNwYWNlLgoKPiA+ID4gQ2hlY2tpbmcgdGhlIGFy Y2gvQUJJIHZhbHVlIGlzIGFsc28gaGFuZHkgaWYgeW91IHdhbnQgdG8gcXVpY2tseQo+ID4gPiBk aXNhbGxvdyBjZXJ0YWluIEFCSXMgb24gYSBzeXN0ZW0gdGhhdCBzdXBwb3J0cyBtdWx0aXBsZSBB QkksIGUuZy4KPiA+ID4gZGlzYWJsaW5nIDMyLWJpdCB4ODYgb24gYSA2NC1iaXQgeDg2XzY0IHN5 c3RlbS4KPiA+ID4KPiA+ID4gPiBXb3VsZCBpdCBtYWtlIHNlbnNlIHRvIGV4cG9zZSB0aGUgYXVk aXQgYXJjaCBtYXRjaGluZyB0aGUgc3lzY2FsbCBudW1iZXJzIGluCj4gPiA+ID4gdGhlIHVhcGkg aGVhZGVycz8KPiA+ID4KPiA+ID4gWWVzLCB3aGljaCBpcyB3aHkgdGhlIGV4aXN0aW5nIGhlYWRl cnMgZG8gc28gOykgIElmIHlvdSBkb24ndCBzZWUgdGhlCj4gPiA+IGhlYWRlciBmaWxlcyBJIG1l bnRpb25lZCBhYm92ZSwgaXQgbWF5IGJlIHdvcnRoIGNoZWNraW5nIHlvdXIga2VybmVsCj4gPiA+ IHNvdXJjZSByZXBvc2l0b3J5IGFuZCB5b3VyIGRpc3RyaWJ1dGlvbidzIGluc3RhbGxlZCBrZXJu ZWwgaGVhZGVyCj4gPiA+IGZpbGVzLgo+ID4KPiA+IEkgZG8gc2VlIGNvbnN0YW50cyBmb3IgYWxs IHRoZSBwb3NzaWJsZSBBQklzIGJ1dCBub3Qgb25lIGNvbnN0YW50IHRoYXQgYWx3YXlzCj4gPiBy ZXByZXNlbnRzIHRoZSBvbmUgSSBhbSBjdXJyZW50bHkgY29tcGlsaW5nIGZvci4KPiA+IFRoZSBz YW1lIHdheSB0aGUgc3lzY2FsbCBudW1iZXIgZGVmaW5lcyBhbHdheXMgZ2l2ZSBtZSB0aGUgc3lz Y2FsbCBudW1iZXIgZm9yCj4gPiB0aGUgY3VycmVudGx5IHRhcmdldGVkIEFCSS4KPiAKPiBJJ20g c29ycnksIGJ1dCBJIGRvbid0IHF1aXRlIHVuZGVyc3RhbmQgd2hhdCB5b3UgYXJlIGxvb2tpbmcg Zm9yIGluCj4gdGhlIGhlYWRlciBmaWxlcyAuLi4gPyAgSXQgbWlnaHQgaGVscCBpZiB5b3UgY291 bGQgcHJvdmlkZSBhIGNvbmNyZXRlCj4gZXhhbXBsZSBvZiB3aGF0IHlvdSB3b3VsZCBsaWtlIHRv IHNlZSBpbiB0aGUgaGVhZGVyIGZpbGVzPwoKSSB3YW50IHRvIGRvIHNvbWV0aGluZyBsaWtlIHRo ZSBmb2xsd2luZyBpbnNpZGUgbXkgcHJvZ3JhbSB0byBhc3NlbWJsZSBhCnNlY2NvbXAgZmlsdGVy IHRoYXQgd2lsbCBiZSBsb2FkZWQgYmVmb3JlIHRoZSBlcnJvci1wcm9uZSBwYXJ0cyBvZiB0aGUK YXBwbGljYXRpb24gd2lsbCBiZWdpbi4KCjE6IEJQRl9TVE1UKEJQRl9MRCB8IEJQRl9XIHwgQlBG X0FCUywgc3lzY2FsbF9hcmNoKSwKMjogQlBGX0pVTVAoQlBGX0pNUCB8IEJQRl9KRVEgfCBCUEZf SywgU0VDQ09NUF9BUkNIX05BVElWRSwgMCwgJEtJTEwpCjM6IEJQRl9TVE1UKEJQRl9MRCB8IEJQ Rl9XIHwgQlBGX0FCUywgc3lzY2FsbF9uciksCjQ6IEJQRl9KVU1QKEJQRl9KTVAgfCBCUEZfSkVR IHwgQlBGX0ssIF9fTlJfd3JpdGUsICRBTExPVywgJEtJTEwpLAoKSW4gbGluZSA0IEkgY2FuIGFs cmVhZHkgaGF2ZSB0aGUga2VybmVsIGhlYWRlcnMgcHJvdmlkZSBtZSB0aGUgY29ycmVjdCBzeXNj YWxsCm51bWJlciBmb3IgdGhlIEFCSSBteSBhcHBsaWNhdGlvbiBpcyBjb21waWxlZCBmb3IuCgpG b3IgbGluZSAyIGhvd2V2ZXIgSSBuZWVkIHRvIGRlZmluZSBBVURJVF9BUkNIX0NVUlJFTlQgb24g bXkgb3duIGluc3RlYWQgb2YKaGF2aW5nIGEga2VybmVsIGhlYWRlciBwcm92aWRlIHRoZSBjb3Jy ZWN0IHZhbHVlLgoKVGhvbWFzCgoKLS0KTGludXgtYXVkaXQgbWFpbGluZyBsaXN0CkxpbnV4LWF1 ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly9saXN0bWFuLnJlZGhhdC5jb20vbWFpbG1hbi9saXN0aW5m by9saW51eC1hdWRpdA==