linux-kernel - [GIT PULL] seccomp updates for v6.15-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <202503170909.7FBAC1E@keescook>
Date: Mon, 17 Mar 2025 09:09:34 -0700
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Kees Cook <kees@...nel.org>,
	Linus Walleij <linus.walleij@...aro.org>,
	Mateusz Guzik <mjguzik@...il.com>, Oleg Nesterov <oleg@...hat.com>,
	Thomas Bogendoerfer <tsbogend@...ha.franken.de>
Subject: [GIT PULL] seccomp updates for v6.15-rc1

Hi Linus,

Please pull these seccomp updates for v6.15-rc1.

Thanks!

-Kees

The following changes since commit a64dcfb451e254085a7daee5fe51bf22959d52d3:

  Linux 6.14-rc2 (2025-02-09 12:45:03 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v6.15-rc1

for you to fetch changes up to 8f19331384e6ca816f5bea20ab45c4b72a5cd05f:

  seccomp: avoid the lock trip seccomp_filter_release in common case (2025-02-24 11:17:10 -0800)

----------------------------------------------------------------
seccomp updates for v6.15-rc1

- avoid the lock trip seccomp_filter_release in common case (Mateusz Guzik)

- remove unused 'sd' argument through-out (Oleg Nesterov)

- selftests/seccomp: Add hard-coded __NR_uretprobe for x86_64

----------------------------------------------------------------
Kees Cook (1):
      selftests/seccomp: Add hard-coded __NR_uretprobe for x86_64

Mateusz Guzik (1):
      seccomp: avoid the lock trip seccomp_filter_release in common case

Oleg Nesterov (4):
      seccomp/mips: change syscall_trace_enter() to use secure_computing()
      seccomp: fix the __secure_computing() stub for !HAVE_ARCH_SECCOMP_FILTER
      seccomp: remove the 'sd' argument from __secure_computing()
      seccomp: remove the 'sd' argument from __seccomp_filter()

 arch/mips/kernel/ptrace.c                     | 20 ++---------
 arch/powerpc/kernel/ptrace/ptrace.c           |  2 +-
 include/linux/seccomp.h                       | 12 +++----
 kernel/entry/common.c                         |  2 +-
 kernel/seccomp.c                              | 49 ++++++++++++++++-----------
 tools/testing/selftests/seccomp/seccomp_bpf.c |  6 ++++
 6 files changed, 43 insertions(+), 48 deletions(-)

-- 
Kees Cook