Kees Cook ce6526e8af seccomp: recheck the syscall after RET_TRACE ...

When RET_TRACE triggers, a tracer may change a syscall into something that
should be filtered by seccomp. This re-runs seccomp after a trace event
to make sure things continue to pass.

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andy Lutomirski <luto@kernel.org>

2016-06-14 10:54:41 -07:00

..

bpf

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-05-31 22:28:28 -07:00

configs

…

debug

…

events

Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2016-05-25 17:05:40 -07:00

gcov

gcov: disable for COMPILE_TEST

2016-05-10 17:12:49 +02:00

irq

irqchip updates for 4.7-rc1:

2016-06-03 15:05:51 +02:00

livepatch

Merge branches 'for-4.7/core', 'for-4.7/livepatching-doc' and 'for-4.7/livepatching-ppc64' into for-linus

2016-05-17 12:06:35 +02:00

locking

add down_write_killable_nested()

2016-05-26 00:04:58 -04:00

power

PM / Hibernate: Call flush_icache_range() on pages restored in-place

2016-04-28 13:35:48 +01:00

printk

printk/nmi: flush NMI messages on the system panic

2016-05-20 17:58:30 -07:00

rcu

debugobjects: insulate non-fixup logic related to static obj from fixup callbacks

2016-05-19 19:12:14 -07:00

sched

Merge branch 'sched-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2016-05-25 17:11:43 -07:00

time

timer: Export destroy_hrtimer_on_stack()

2016-05-31 11:44:08 -07:00

trace

Three more changes.

2016-05-22 19:40:39 -07:00

.gitignore

…

acct.c

…

async.c

…

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

…

audit.c

Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/audit

2016-05-18 18:46:55 -07:00

audit.h

…

auditfilter.c

…

auditsc.c

Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/audit

2016-05-18 18:46:55 -07:00

backtracetest.c

…

bounds.c

…

capability.c

kernel: Add noaudit variant of ns_capable()

2016-06-06 20:16:18 +10:00

cgroup_freezer.c

…

cgroup_pids.c

…

cgroup.c

cgroup: fix compile warning

2016-05-12 11:05:27 -04:00

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

sched/hotplug: Make activate() the last hotplug step

2016-05-06 14:58:25 +02:00

cpuset.c

cpuset: use static key better and convert to new API

2016-05-19 19:12:14 -07:00

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

wait: allow sys_waitid() to accept __WNOTHREAD/__WCLONE/__WALL

2016-05-23 17:04:14 -07:00

extable.c

…

fork.c

mm: oom_reaper: remove some bloat

2016-05-26 15:35:44 -07:00

freezer.c

…

futex_compat.c

…

futex.c

x86: remove more uaccess_32.h complexity

2016-05-22 17:21:27 -07:00

groups.c

…

hung_task.c

…

irq_work.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

kcov: don't profile branches in kcov

2016-04-28 19:34:04 -07:00

kexec_core.c

s390/kexec: consolidate crash_map/unmap_reserved_pages() and arch_kexec_protect(unprotect)_crashkres()

2016-05-23 17:04:14 -07:00

kexec_file.c

kexec: introduce a protection mechanism for the crashkernel reserved memory

2016-05-23 17:04:14 -07:00

kexec_internal.h

…

kexec.c

s390/kexec: consolidate crash_map/unmap_reserved_pages() and arch_kexec_protect(unprotect)_crashkres()

2016-05-23 17:04:14 -07:00

kmod.c

…

kprobes.c

…

ksysfs.c

…

kthread.c

…

latencytop.c

…

Makefile

ELF/MIPS build fix

2016-05-23 17:04:14 -07:00

membarrier.c

…

memremap.c

…

module_signing.c

…

module-internal.h

…

module.c

…

notifier.c

…

nsproxy.c

…

padata.c

kernel/padata.c: hide unused functions

2016-05-19 19:12:14 -07:00

panic.c

printk/nmi: flush NMI messages on the system panic

2016-05-20 17:58:30 -07:00

params.c

…

pid_namespace.c

…

pid.c

remove lots of IS_ERR_VALUE abuses

2016-05-27 15:26:11 -07:00

profile.c

…

ptrace.c

…

range.c

…

reboot.c

…

relay.c

…

resource.c

…

seccomp.c

seccomp: recheck the syscall after RET_TRACE

2016-06-14 10:54:41 -07:00

signal.c

kernel/signal.c: convert printk(KERN_<LEVEL> ...) to pr_<level>(...)

2016-05-23 17:04:14 -07:00

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

prctl: make PR_SET_THP_DISABLE wait for mmap_sem killable

2016-05-23 17:04:14 -07:00

sysctl_binary.c

kernel/sysctl_binary.c: use generic UUID library

2016-05-20 17:58:30 -07:00

sysctl.c

Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2016-05-25 17:05:40 -07:00

task_work.c

…

taskstats.c

taskstats: use the libnl API to align nlattr on 64-bit

2016-04-23 20:13:25 -04:00

test_kprobes.c

…

torture.c

rcutorture: Dump trace buffer upon shutdown

2016-04-21 13:47:04 -07:00

tracepoint.c

…

tsacct.c

…

uid16.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

watchdog.c

…

workqueue_internal.h

…

workqueue.c

debugobjects: insulate non-fixup logic related to static obj from fixup callbacks

2016-05-19 19:12:14 -07:00