[GIT PULL] seccomp updates for v5.10-rc1

* [GIT PULL] seccomp updates for v5.10-rc1
@ 2020-10-12 22:15 Kees Cook
  2020-10-13 23:49 ` pr-tracker-bot
  0 siblings, 1 reply; 2+ messages in thread
From: Kees Cook @ 2020-10-12 22:15 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: linux-kernel, Christian Brauner, Denis Efremov, Hulk Robot,
	Jann Horn, Michael Ellerman, Rich Felker, Shuah Khan,
	Thadeu Lima de Souza Cascardo, Tycho Andersen, YiFei Zhu,
	Zou Wei

Hi Linus,

Please pull these seccomp updates for v5.10-rc1. The bulk of the changes
are with the seccomp selftests to accommodate some powerpc-specific
behavioral characteristics. Additional cleanups, fixes, and improvements
are also included, noted in the tag description.

Thanks!

-Kees

The following changes since commit e839317900e9f13c83d8711d684de88c625b307a:

  seccomp: don't leave dangling ->notif if file allocation fails (2020-09-08 11:30:16 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.10-rc1

for you to fetch changes up to dfe719fef03d752f1682fa8aeddf30ba501c8555:

  seccomp: Make duplicate listener detection non-racy (2020-10-08 13:17:47 -0700)

----------------------------------------------------------------
seccomp updates for v5.10-rc1

- heavily refactor seccomp selftests (and clone3 selftests dependency) to
  fix powerpc (Kees Cook, Thadeu Lima de Souza Cascardo)
- fix style issue in selftests (Zou Wei)
- upgrade "unknown action" from KILL_THREAD to KILL_PROCESS (Rich Felker)
- replace task_pt_regs(current) with current_pt_regs() (Denis Efremov)
- fix corner-case race in USER_NOTIF (Jann Horn)
- make CONFIG_SECCOMP no longer per-arch (YiFei Zhu)

----------------------------------------------------------------
Denis Efremov (1):
      seccomp: Use current_pt_regs() instead of task_pt_regs(current)

Jann Horn (1):
      seccomp: Make duplicate listener detection non-racy

Kees Cook (18):
      selftests/seccomp: Add test for unknown SECCOMP_RET kill behavior
      selftests/seccomp: Use __NR_mknodat instead of __NR_mknod
      selftests/seccomp: Refactor arch register macros to avoid xtensa special case
      selftests/seccomp: Provide generic syscall setting macro
      selftests/seccomp: mips: Define SYSCALL_NUM_SET macro
      selftests/seccomp: arm: Define SYSCALL_NUM_SET macro
      selftests/seccomp: arm64: Define SYSCALL_NUM_SET macro
      selftests/seccomp: mips: Remove O32-specific macro
      selftests/seccomp: Remove syscall setting #ifdefs
      selftests/seccomp: Convert HAVE_GETREG into ARCH_GETREG/ARCH_SETREG
      selftests/seccomp: Convert REGSET calls into ARCH_GETREG/ARCH_SETREG
      selftests/seccomp: Avoid redundant register flushes
      selftests/seccomp: Remove SYSCALL_NUM_RET_SHARE_REG in favor of SYSCALL_RET_SET
      selftests/seccomp: powerpc: Fix seccomp return value testing
      selftests/seccomp: Record syscall during ptrace entry
      selftests/seccomp: Allow syscall nr and ret value to be set separately
      selftests/seccomp: powerpc: Set syscall return during ptrace syscall exit
      selftests/clone3: Avoid OS-defined clone_args

Rich Felker (1):
      seccomp: kill process instead of thread for unknown actions

YiFei Zhu (1):
      seccomp: Move config option SECCOMP to arch/Kconfig

Zou Wei (1):
      selftests/seccomp: Use bitwise instead of arithmetic operator for flags

 arch/Kconfig                                       |  30 ++
 arch/arm/Kconfig                                   |  15 +-
 arch/arm64/Kconfig                                 |  13 -
 arch/csky/Kconfig                                  |  13 -
 arch/microblaze/Kconfig                            |  18 +-
 arch/mips/Kconfig                                  |  17 -
 arch/parisc/Kconfig                                |  16 -
 arch/powerpc/Kconfig                               |  17 -
 arch/riscv/Kconfig                                 |  13 -
 arch/s390/Kconfig                                  |  17 -
 arch/sh/Kconfig                                    |  16 -
 arch/sparc/Kconfig                                 |  18 +-
 arch/um/Kconfig                                    |  16 -
 arch/x86/Kconfig                                   |  16 -
 arch/xtensa/Kconfig                                |  14 -
 kernel/seccomp.c                                   |  64 ++-
 tools/testing/selftests/clone3/clone3.c            |  45 +--
 .../clone3/clone3_cap_checkpoint_restore.c         |   4 +-
 .../selftests/clone3/clone3_clear_sighand.c        |   2 +-
 tools/testing/selftests/clone3/clone3_selftests.h  |  24 +-
 tools/testing/selftests/clone3/clone3_set_tid.c    |   4 +-
 tools/testing/selftests/pidfd/pidfd_setns_test.c   |   2 +-
 tools/testing/selftests/seccomp/seccomp_bpf.c      | 440 +++++++++++++--------
 23 files changed, 397 insertions(+), 437 deletions(-)

-- 
Kees Cook

^ permalink raw reply	[flat|nested] 2+ messages in thread