linux/Documentation/features
Michael Schmitz 6baaade155 m68k: Add kernel seccomp support
Add secure_computing() call to syscall_trace_enter to actually
filter system calls.

Add necessary arch Kconfig options, define TIF_SECCOMP trace
flag and provide basic seccomp filter support in asm/syscall.h

syscall_get_nr currently uses the syscall nr stored in orig_d0
because we change d0 to a default return code before starting a
syscall trace. This may be inconsistent with syscall_rollback
copying orig_d0 to d0 (which we never check upon return from
trace). We use d0 for the return code from syscall_trace_enter
in entry.S currently, and could perhaps expand that to store
a new syscall number returned by the seccomp filter before
executing the syscall. This clearly needs some discussion.

seccomp_bpf self test on ARAnyM passes 81 out of 94 tests.

Signed-off-by: Michael Schmitz <schmitzmic@gmail.com>
Reviewed-by: Geert Uytterhoeven <geert@linux-m68k.org>
Link: https://lore.kernel.org/r/20230112035529.13521-3-schmitzmic@gmail.com
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2023-01-30 16:40:15 +01:00
..
core Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
debug Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
io/dma-contiguous Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
locking Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
perf Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
sched Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
scripts Documentation/features-refresh.sh: Only sed the beginning "arch" of ARCH_DIR 2022-12-05 02:50:12 -07:00
seccomp/seccomp-filter m68k: Add kernel seccomp support 2023-01-30 16:40:15 +01:00
time Documentation/features: Use loongarch instead of loong 2022-12-05 02:50:12 -07:00
vm RISC-V Patches for the 6.2 Merge Window, Part 1 2022-12-14 15:23:49 -08:00
arch-support.txt Documentation/features: mark BATCHED_UNMAP_TLB_FLUSH doesn't apply to ARM64 2021-03-15 13:17:40 -06:00
list-arch.sh scripts: get_feat.pl: use its implementation for list-arch.sh 2020-12-03 15:10:14 -07:00