Re: [PATCH] seccomp: Add pkru into seccomp_data
From: Florian Weimer <hidden>
Date: 2018-10-24 18:08:53
Also in:
linuxppc-dev
* Michael Sammler:
Add the current value of the PKRU register to data available for seccomp-bpf programs to work on. This allows filters based on the currently enabled protection keys.
quoted hunk
diff --git a/include/uapi/linux/seccomp.h b/include/uapi/linux/seccomp.h index 9efc0e73..e8b9ecfc 100644 --- a/include/uapi/linux/seccomp.h +++ b/include/uapi/linux/seccomp.h@@ -52,12 +52,16 @@ * @instruction_pointer: at the time of the system call. * @args: up to 6 system call arguments always stored as 64-bit values * regardless of the architecture. + * @pkru: value of the pkru register + * @reserved: pad the structure to a multiple of eight bytes */ struct seccomp_data { int nr; __u32 arch; __u64 instruction_pointer; __u64 args[6]; + __u32 pkru; + __u32 reserved; };
This doesn't cover the POWER implementation. Adding Cc:s. And I think the kernel shouldn't expose the number of protection keys in the ABI. Thanks, Florian