From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.8 required=3.0 tests=DKIM_ADSP_CUSTOM_MED, DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,URIBL_SBL,URIBL_SBL_A autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 32770C3A5A4 for ; Wed, 28 Aug 2019 21:38:20 +0000 (UTC) Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 063BC2339E for ; Wed, 28 Aug 2019 21:38:20 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="f4voYGS0"; dkim=fail reason="signature verification failed" (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="SiERiSw5" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 063BC2339E Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-riscv-bounces+infradead-linux-riscv=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:Cc:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:To:Subject:Message-ID:Date:From: In-Reply-To:References:MIME-Version:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=67PVcpUsj/qvJY9lV+b9iZuspLtvpVskx1byle0rVQs=; b=f4voYGS0x/TM/p UOi1FoQq6m5qpGshx1gw+XVF48YJ6DnnqhbLRI46wsYWURiog9MuYtAkOV1kR+hiuE6vHfQPB2hte AuiPHfwFr06vVoBZBljuh+NTFqp8V9l7/B585AFWjI96ShJ8KNvxr5mX/7dlr8A/XNZUoZ0p6Ci0B sgoaKt8cDjVgtFBt32Wv7GbyHw+kGpQRXiLz+/iOhEeyJD38EcRN1ix1otmG3bk18izsHO0l1VDL6 P0VLAs8BH1FUtnxzmYsXEL0gjXvtJGpcnD4XbwKtucqtGkkNJVjCfc/4pq2S+dmzGu0QKIjDHKRQu P6OJW0jzdCqsc3b5XNQA==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.92 #3 (Red Hat Linux)) id 1i35dv-0006EZ-6Y; Wed, 28 Aug 2019 21:38:15 +0000 Received: from mail-wr1-x442.google.com ([2a00:1450:4864:20::442]) by bombadil.infradead.org with esmtps (Exim 4.92 #3 (Red Hat Linux)) id 1i35dt-0006ED-1C for linux-riscv@lists.infradead.org; Wed, 28 Aug 2019 21:38:14 +0000 Received: by mail-wr1-x442.google.com with SMTP id j16so1255141wrr.8 for ; Wed, 28 Aug 2019 14:38:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sGjhjuh8luS+aqRBrfS7bHWA5KJ+QKi4i3rS6Cai6WY=; b=SiERiSw553Kaxk/tRLH5J9b4vOVe5PEhITDMHzFEy2/8RX+K5wXHNtNLCnw4SbRJDk JCCiIjdQLrIoZA/CfHjgVs42XEDgAWj4hn7afiVHrFw8LJtdpynYnsoxpBqKbSqTqfJd HNKWuEzo2ini90T5kpyxNSKb+8ForNyAOwc/MVmCzxKfCGPiRbo466ilnhXU68kB1bA3 EhqYXDVTNeccNDqqIA7pYJlVX3RC/R8qfQnLNqoxVjSsXOio6D72LFOvsXoI14FflENV wapdyA8ef8PQbXzGRWwhRRf3ISJ1p8DISLOgSWn54ygagD1I+Y5zRELj7YNRL6Zba8BR qYwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sGjhjuh8luS+aqRBrfS7bHWA5KJ+QKi4i3rS6Cai6WY=; b=uPKat0lUWk2N8gBqwxM4Z1UaEr7P9EjcwBQpJqL3DRtJv+yGT+EHjTfqrDhKhigSuC SFJyW786kFoTzvwwiTZyZHwkNygiiJfwbmTwI13nSiYDANc9ksHqOJrnmfe6t6vENz2v O1STqAY1UGZ3lgzoavMJrnvcoo4XcxrjOvwGb51U7cuWYXWXW2w/Nm2ZZ5fazMDhq5Uv GKCmZWuSVCGzv0KFZXRIJL93nWswis39Lndl9yKOEsfgnIsNGbWopqd9CGRg07DghC/s bo2C8lx50zCQYbBjEvFGIGB/ZKx5e9e2CLSdkem5OvvRPmvz8yRmUu+YT3nFNaE6BgAq Vmhw== X-Gm-Message-State: APjAAAU0auauKeN3uw7qiOqLV5udJA7U6XZ8NsuEbnoShVy+9m1Ia6dv I7hIrJAVDKBJ60KaPc3A1ZpX1TgXH2dJPTuGWiY= X-Google-Smtp-Source: APXvYqy0U65XUAnttf145xEP+EHodRd9s98VxWubDUuMO7oGhPo6lBhmmd2Vbn44BFVHtYxXeHabTrxP5Dn2X0NcIS4= X-Received: by 2002:a5d:51c6:: with SMTP id n6mr7299855wrv.206.1567028290871; Wed, 28 Aug 2019 14:38:10 -0700 (PDT) MIME-Version: 1.0 References: <20190822205533.4877-1-david.abdurachmanov@sifive.com> <201908251451.73C6812E8@keescook> In-Reply-To: <201908251451.73C6812E8@keescook> From: David Abdurachmanov Date: Wed, 28 Aug 2019 14:37:34 -0700 Message-ID: Subject: Re: [PATCH v2] riscv: add support for SECCOMP and SECCOMP_FILTER To: Kees Cook X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20190828_143813_074399_C1FAA3D5 X-CRM114-Status: GOOD ( 13.70 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Song Liu , Alan Kao , Palmer Dabbelt , Alexei Starovoitov , Oleg Nesterov , linux-kselftest@vger.kernel.org, linux-riscv@lists.infradead.org, Shuah Khan , Daniel Borkmann , Yonghong Song , me@carlosedp.com, Albert Ou , Alexios Zavras , Paul Walmsley , Thomas Gleixner , Allison Randal , Will Drewry , David Abdurachmanov , netdev@vger.kernel.org, Anup Patel , linux-kernel@vger.kernel.org, Andy Lutomirski , Vincent Chen , bpf@vger.kernel.org, Martin KaFai Lau Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "linux-riscv" Errors-To: linux-riscv-bounces+infradead-linux-riscv=archiver.kernel.org@lists.infradead.org On Wed, Aug 28, 2019 at 10:36 AM Kees Cook wrote: > > On Thu, Aug 22, 2019 at 01:55:22PM -0700, David Abdurachmanov wrote: > > This patch was extensively tested on Fedora/RISCV (applied by default on > > top of 5.2-rc7 kernel for <2 months). The patch was also tested with 5.3-rc > > on QEMU and SiFive Unleashed board. > > Oops, I see the mention of QEMU here. Where's the best place to find > instructions on creating a qemu riscv image/environment? Examples from what I personally use: https://github.com/riscv/meta-riscv https://fedoraproject.org/wiki/Architectures/RISC-V/Installing#Boot_with_libvirt (might be outdated) If you are running machine with a properly working libvirt/QEMU setup: VIRTBUILDER_IMAGE=fedora-rawhide-developer-20190703n0 FIRMWARE=fw_payload-uboot-qemu-virt-smode.elf wget https://dl.fedoraproject.org/pub/alt/risc-v/disk-images/fedora/rawhide/20190703.n.0/Developer/$FIRMWARE echo riscv > /tmp/rootpw virt-builder \ --verbose \ --source https://dl.fedoraproject.org/pub/alt/risc-v/repo/virt-builder-images/images/index \ --no-check-signature \ --arch riscv64 \ --size 10G \ --format raw \ --hostname fedora-riscv \ -o disk \ --root-password file:/tmp/rootpw \ ${VIRTBUILDER_IMAGE} sudo virt-install \ --name fedora-riscv \ --arch riscv64 \ --vcpus 4 \ --memory 3048 \ --import \ --disk path=$PWD/disk \ --boot kernel=$PWD/${FIRMWARE} \ --network network=default \ --graphics none \ --serial log.file=/tmp/fedora-riscv.serial.log \ --noautoconsole The following does incl. SECCOMP v2 patch on top of 5.2-rc7 kernel. > > > There is one failing kernel selftest: global.user_notification_signal > > This test has been fragile (and is not arch-specific), so as long as > everything else is passing, I would call this patch ready to go. :) > > Reviewed-by: Kees Cook > > -- > Kees Cook _______________________________________________ linux-riscv mailing list linux-riscv@lists.infradead.org http://lists.infradead.org/mailman/listinfo/linux-riscv