linux-kernel - [GIT PULL] seccomp fixes for v4.9-rc4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 1 Nov 2016 10:46:12 -0700
From:   Kees Cook <keescook@...omium.org>
To:     James Morris <jmorris@...ei.org>
Cc:     linux-kernel@...r.kernel.org,
        Mickaël Salaün <mic@...ikod.net>,
        Ricky Zhou <rickyz@...omium.org>,
        linux-security-module@...r.kernel.org
Subject: [GIT PULL] seccomp fixes for v4.9-rc4

Hi,

Please pull these seccomp fixes for v4.9-rc4.

Thanks!

-Kees

The following changes since commit 07d9a380680d1c0eb51ef87ff2eab5c994949e69:

  Linux 4.9-rc2 (2016-10-23 17:10:14 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v4.9-rc4

for you to fetch changes up to d881d25cf5bc2fafbbfb383a475278977e1bd55a:

  samples/seccomp: Support programs with >256 instructions (2016-11-01 08:58:17 -0700)

----------------------------------------------------------------
- fix function prototype documentation
- fix samples to include NNP setting
- fix samples to avoid rule truncation
- fix samples hostprogs variable in Makefile

----------------------------------------------------------------
Mickaël Salaün (1):
      seccomp: Fix documentation

Ricky Zhou (3):
      samples/seccomp: Fix hostprogs variable
      samples/seccomp: Enable PR_SET_NO_NEW_PRIVS in dropper
      samples/seccomp: Support programs with >256 instructions

 kernel/seccomp.c             |  7 +++----
 samples/seccomp/Makefile     |  4 ++--
 samples/seccomp/bpf-helper.c | 38 +++++++++++++++++++-------------------
 samples/seccomp/dropper.c    |  7 +++++--
 4 files changed, 29 insertions(+), 27 deletions(-)

-- 
Kees Cook
Nexus Security