[PATCH 11/14] s390/ptrace: run seccomp after ptrace

On Thu,  9 Jun 2016 14:02:01 -0700
Kees Cook [off-list ref] wrote:

Close the hole where ptrace can change a syscall out from under seccomp.

Signed-off-by: Kees Cook <redacted>
Cc: Heiko Carstens <redacted>
Cc: Martin Schwidefsky <redacted>
Cc: linux-s390 at vger.kernel.org
---
 arch/s390/kernel/ptrace.c | 21 +++++++++------------
 1 file changed, 9 insertions(+), 12 deletions(-)

If the change in semantics in regard to the audit of skipped system calls
is acceptable, the modified s390 arch code is ok.

-- 
blue skies,
   Martin.

"Reality continues to ruin my life." - Calvin.