linux-kernel - [GIT PULL] seccomp updates for v5.19-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202205231214.ED9D18F@keescook>
Date:   Mon, 23 May 2022 12:15:01 -0700
From:   Kees Cook <keescook@...omium.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org,
        Christian Brauner <brauner@...nel.org>,
        Colin Ian King <colin.i.king@...il.com>,
        David Yang <davidcomponentone@...il.com>,
        Jann Horn <jannh@...gle.com>,
        Kees Cook <keescook@...omium.org>,
        linux-kselftest@...r.kernel.org, Sargun Dhillon <sargun@...gun.me>,
        Shuah Khan <skhan@...uxfoundation.org>,
        Tycho Andersen <tycho@...ho.pizza>,
        Yang Guang <yang.guang5@....com.cn>
Subject: [GIT PULL] seccomp updates for v5.19-rc1

Hi Linus,

Please pull these seccomp updates for v5.19-rc1.

Thanks!

-Kees

The following changes since commit 2bfed7d2ffa5d86c462d3e2067f2832eaf8c04c7:

  selftests/seccomp: Don't call read() on TTY from background pgrp (2022-04-29 11:28:41 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.19-rc1

for you to fetch changes up to 5e91d2a4146946ea0abc984ca957f12b70632901:

  selftests/seccomp: Fix spelling mistake "Coud" -> "Could" (2022-05-04 13:31:21 -0700)

----------------------------------------------------------------
seccomp updates for v5.19-rc1

- Rework USER_NOTIF notification ordering and kill logic (Sargun Dhillon)

- Improved PTRACE_O_SUSPEND_SECCOMP selftest (Jann Horn)

- Gracefully handle failed unshare() in selftests (Yang Guang)

- Spelling fix (Colin Ian King)

----------------------------------------------------------------
Colin Ian King (1):
      selftests/seccomp: Fix spelling mistake "Coud" -> "Could"

Jann Horn (1):
      selftests/seccomp: Test PTRACE_O_SUSPEND_SECCOMP without CAP_SYS_ADMIN

Sargun Dhillon (5):
      seccomp: Use FIFO semantics to order notifications
      selftests/seccomp: Ensure that notifications come in FIFO order
      seccomp: Add wait_killable semantic to seccomp user notifier
      selftests/seccomp: Refactor get_proc_stat to split out file reading code
      selftests/seccomp: Add test for wait killable notifier

Yang Guang (1):
      selftests/seccomp: Add SKIP for failed unshare()

 Documentation/userspace-api/seccomp_filter.rst |  10 +
 include/linux/seccomp.h                        |   3 +-
 include/uapi/linux/seccomp.h                   |   2 +
 kernel/seccomp.c                               |  44 ++-
 tools/testing/selftests/seccomp/Makefile       |   1 +
 tools/testing/selftests/seccomp/seccomp_bpf.c  | 427 ++++++++++++++++++++++++-
 6 files changed, 482 insertions(+), 5 deletions(-)

-- 
Kees Cook