From: Florian Weimer <fweimer@redhat.com>
To: Christian Brauner <brauner@kernel.org>
Cc: Arnd Bergmann <arnd@arndb.de>, Huacai Chen <chenhuacai@gmail.com>,
Huacai Chen <chenhuacai@loongson.cn>,
Andy Lutomirski <luto@kernel.org>,
Thomas Gleixner <tglx@linutronix.de>,
Peter Zijlstra <peterz@infradead.org>,
Andrew Morton <akpm@linux-foundation.org>,
David Airlie <airlied@linux.ie>, Jonathan Corbet <corbet@lwn.net>,
Linus Torvalds <torvalds@linux-foundation.org>,
linux-arch <linux-arch@vger.kernel.org>,
"open list:DOCUMENTATION" <linux-doc@vger.kernel.org>,
Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
Xuefeng Li <lixuefeng@loongson.cn>,
Yanteng Si <siyanteng@loongson.cn>, Guo Ren <guoren@kernel.org>,
Xuerui Wang <kernel@xen0n.name>,
Jiaxun Yang <jiaxun.yang@flygoat.com>,
Linux API <linux-api@vger.kernel.org>
Subject: Re: [PATCH V9 13/24] LoongArch: Add system call support
Date: Wed, 11 May 2022 18:17:09 +0200 [thread overview]
Message-ID: <87bkw4doxm.fsf@oldenburg.str.redhat.com> (raw)
In-Reply-To: <20220509100058.vmrgn5fkk3ayt63v@wittgenstein> (Christian Brauner's message of "Mon, 9 May 2022 12:00:58 +0200")
* Christian Brauner:
> Without an approach like this certain sandboxes will fallback to
> ENOSYSing system calls they can't filter. This is a generic problem
> though with clone3() being one promiment example.
Furthermore, for glibc (and I believe musl as well), the trick with
in-process emulation of clone3 using SIGSYS does not work here because
we must inhibit delivery of signals on the nascent thread, before it is
fully set up. This means that we have to block signals around the
clone/clone3 system call, so that the new thread is created with all
signals blocked. This means that instead of calling the SIGSYS handler,
the filtered system call simply terminates the process.
(I think there have been discussions of using out-of-process filtering,
but I don't know where we are with that.)
Thanks,
Florian
next prev parent reply other threads:[~2022-05-11 16:17 UTC|newest]
Thread overview: 80+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-04-30 9:04 [PATCH V9 00/22] arch: Add basic LoongArch support Huacai Chen
2022-04-30 9:04 ` [PATCH V9 01/24] Documentation: LoongArch: Add basic documentations Huacai Chen
2022-05-01 7:48 ` Bagas Sanjaya
2022-05-01 8:55 ` Huacai Chen
2022-05-01 9:32 ` WANG Xuerui
2022-05-01 10:17 ` Huacai Chen
2022-04-30 9:04 ` [PATCH V9 02/24] Documentation/zh_CN: Add basic LoongArch documentations Huacai Chen
2022-05-01 9:38 ` WANG Xuerui
2022-04-30 9:04 ` [PATCH V9 03/24] LoongArch: Add elf-related definitions Huacai Chen
2022-05-01 9:41 ` WANG Xuerui
2022-05-01 14:27 ` Huacai Chen
2022-04-30 9:04 ` [PATCH V9 04/24] LoongArch: Add writecombine support for drm Huacai Chen
2022-04-30 9:04 ` [PATCH V9 05/24] LoongArch: Add build infrastructure Huacai Chen
2022-05-01 10:09 ` WANG Xuerui
2022-05-01 12:41 ` Huacai Chen
2022-05-01 15:43 ` Xi Ruoyao
2022-04-30 9:05 ` [PATCH V9 06/24] LoongArch: Add CPU definition headers Huacai Chen
2022-05-01 11:05 ` WANG Xuerui
2022-05-01 15:07 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 07/24] LoongArch: Add atomic/locking headers Huacai Chen
2022-05-01 11:16 ` WANG Xuerui
2022-05-01 13:16 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 08/24] LoongArch: Add other common headers Huacai Chen
2022-05-01 11:39 ` WANG Xuerui
2022-05-01 14:26 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 09/24] LoongArch: Add boot and setup routines Huacai Chen
2022-04-30 9:05 ` [PATCH V9 10/24] LoongArch: Add exception/interrupt handling Huacai Chen
2022-05-01 16:27 ` Xi Ruoyao
2022-05-01 17:08 ` Xi Ruoyao
2022-05-02 0:01 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 11/24] LoongArch: Add process management Huacai Chen
2022-04-30 9:05 ` [PATCH V9 12/24] LoongArch: Add memory management Huacai Chen
2022-04-30 9:05 ` [PATCH V9 13/24] LoongArch: Add system call support Huacai Chen
2022-04-30 9:44 ` Arnd Bergmann
2022-04-30 10:05 ` Huacai Chen
2022-04-30 10:34 ` Arnd Bergmann
2022-05-07 12:11 ` Christian Brauner
2022-05-09 10:00 ` Christian Brauner
2022-05-11 7:11 ` Arnd Bergmann
2022-05-11 21:12 ` [musl] " Rich Felker
2022-05-12 7:21 ` Arnd Bergmann
2022-05-12 12:11 ` Rich Felker
2022-05-11 16:17 ` Florian Weimer [this message]
2022-04-30 9:05 ` [PATCH V9 14/24] LoongArch: Add signal handling support Huacai Chen
2022-04-30 9:05 ` [PATCH V9 15/24] LoongArch: Add elf and module support Huacai Chen
2022-04-30 9:05 ` [PATCH V9 16/24] LoongArch: Add misc common routines Huacai Chen
2022-04-30 9:50 ` Arnd Bergmann
2022-04-30 10:00 ` Huacai Chen
2022-04-30 10:41 ` Arnd Bergmann
2022-04-30 13:22 ` Palmer Dabbelt
2022-05-01 5:12 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 17/24] LoongArch: Add some library functions Huacai Chen
2022-05-01 10:55 ` Guo Ren
2022-05-01 12:18 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 18/24] LoongArch: Add PCI controller support Huacai Chen
2022-04-30 9:05 ` [PATCH V9 19/24] LoongArch: Add VDSO and VSYSCALL support Huacai Chen
2022-04-30 9:05 ` [PATCH V9 20/24] LoongArch: Add efistub booting support Huacai Chen
2022-04-30 9:56 ` Arnd Bergmann
2022-04-30 10:02 ` Huacai Chen
2022-05-03 7:23 ` Ard Biesheuvel
2022-05-05 9:59 ` Huacai Chen
2022-05-06 8:14 ` Ard Biesheuvel
2022-05-06 11:26 ` WANG Xuerui
2022-05-06 11:41 ` Arnd Bergmann
2022-05-06 13:20 ` Huacai Chen
2022-05-13 19:32 ` Arnd Bergmann
2022-05-14 2:27 ` Huacai Chen
2022-04-30 9:05 ` [PATCH V9 21/24] LoongArch: Add zboot (compressed kernel) support Huacai Chen
2022-04-30 10:07 ` Arnd Bergmann
2022-05-01 5:22 ` Huacai Chen
2022-05-01 6:35 ` Russell King (Oracle)
2022-05-01 8:46 ` Huacai Chen
2022-05-01 11:28 ` Russell King (Oracle)
2022-05-01 8:33 ` Arnd Bergmann
2022-05-01 23:36 ` Ard Biesheuvel
2022-04-30 9:05 ` [PATCH V9 22/24] LoongArch: Add multi-processor (SMP) support Huacai Chen
2022-04-30 9:05 ` [PATCH V9 23/24] LoongArch: Add Non-Uniform Memory Access (NUMA) support Huacai Chen
2022-04-30 9:05 ` [PATCH V9 24/24] LoongArch: Add Loongson-3 default config file Huacai Chen
2022-05-01 8:19 ` [PATCH V9 00/22] arch: Add basic LoongArch support Bagas Sanjaya
2022-05-01 8:55 ` Huacai Chen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87bkw4doxm.fsf@oldenburg.str.redhat.com \
--to=fweimer@redhat.com \
--cc=airlied@linux.ie \
--cc=akpm@linux-foundation.org \
--cc=arnd@arndb.de \
--cc=brauner@kernel.org \
--cc=chenhuacai@gmail.com \
--cc=chenhuacai@loongson.cn \
--cc=corbet@lwn.net \
--cc=guoren@kernel.org \
--cc=jiaxun.yang@flygoat.com \
--cc=kernel@xen0n.name \
--cc=linux-api@vger.kernel.org \
--cc=linux-arch@vger.kernel.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=lixuefeng@loongson.cn \
--cc=luto@kernel.org \
--cc=peterz@infradead.org \
--cc=siyanteng@loongson.cn \
--cc=tglx@linutronix.de \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).