projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d829fcc) | patch
seccomp: Add filter flag to opt-out of SSB mitigation
authorKees Cook <keescook@chromium.org>
Thu, 3 May 2018 21:56:12 +0000 (14:56 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 22 May 2018 16:54:04 +0000 (18:54 +0200)
commit9939db75cd5b686ca43c4aa26e24d6b73ffa66e0
treecf125c3fda15c426cc89962e4d85b32e00357acctree | snapshot (tar.gz zip)
parentd829fcceb8f532966bfb07fb67cb968374fcbbd2commit | diff
seccomp: Add filter flag to opt-out of SSB mitigation

commit 00a02d0c502a06d15e07b857f8ff921e3e402675 upstream

If a seccomp user is not interested in Speculative Store Bypass mitigation
by default, it can set the new SECCOMP_FILTER_FLAG_SPEC_ALLOW flag when
adding filters.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/linux/seccomp.h diff | blob | blame | history
include/uapi/linux/seccomp.h diff | blob | blame | history
kernel/seccomp.c diff | blob | blame | history
tools/testing/selftests/seccomp/seccomp_bpf.c diff | blob | blame | history