mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-10-01 06:33:07 +00:00
25db91209a
Provide seccomp internals with the details to calculate which syscall table the running kernel is expecting to deal with. This allows for efficient architecture pinning and paves the way for constant-action bitmaps. Co-developed-by: YiFei Zhu <yifeifz2@illinois.edu> Signed-off-by: YiFei Zhu <yifeifz2@illinois.edu> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/da58c3733d95c4f2115dd94225dfbe2573ba4d87.1602431034.git.yifeifz2@illinois.edu
41 lines
1.2 KiB
C
41 lines
1.2 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef _ASM_X86_SECCOMP_H
|
|
#define _ASM_X86_SECCOMP_H
|
|
|
|
#include <asm/unistd.h>
|
|
|
|
#ifdef CONFIG_X86_32
|
|
#define __NR_seccomp_sigreturn __NR_sigreturn
|
|
#endif
|
|
|
|
#ifdef CONFIG_COMPAT
|
|
#include <asm/ia32_unistd.h>
|
|
#define __NR_seccomp_read_32 __NR_ia32_read
|
|
#define __NR_seccomp_write_32 __NR_ia32_write
|
|
#define __NR_seccomp_exit_32 __NR_ia32_exit
|
|
#define __NR_seccomp_sigreturn_32 __NR_ia32_sigreturn
|
|
#endif
|
|
|
|
#ifdef CONFIG_X86_64
|
|
# define SECCOMP_ARCH_NATIVE AUDIT_ARCH_X86_64
|
|
# define SECCOMP_ARCH_NATIVE_NR NR_syscalls
|
|
# define SECCOMP_ARCH_NATIVE_NAME "x86_64"
|
|
# ifdef CONFIG_COMPAT
|
|
# define SECCOMP_ARCH_COMPAT AUDIT_ARCH_I386
|
|
# define SECCOMP_ARCH_COMPAT_NR IA32_NR_syscalls
|
|
# define SECCOMP_ARCH_COMPAT_NAME "ia32"
|
|
# endif
|
|
/*
|
|
* x32 will have __X32_SYSCALL_BIT set in syscall number. We don't support
|
|
* caching them and they are treated as out of range syscalls, which will
|
|
* always pass through the BPF filter.
|
|
*/
|
|
#else /* !CONFIG_X86_64 */
|
|
# define SECCOMP_ARCH_NATIVE AUDIT_ARCH_I386
|
|
# define SECCOMP_ARCH_NATIVE_NR NR_syscalls
|
|
# define SECCOMP_ARCH_NATIVE_NAME "ia32"
|
|
#endif
|
|
|
|
#include <asm-generic/seccomp.h>
|
|
|
|
#endif /* _ASM_X86_SECCOMP_H */
|