Re: [linux-audit/audit-kernel] BUG: audit_classify_syscall() fails to properly handle 64-bit syscalls when executing as 32-bit application on ARM (#131)

3 messages, 3 authors, 2021-07-07 · open the first message on its own page

Re: [linux-audit/audit-kernel] BUG: audit_classify_syscall() fails to properly handle 64-bit syscalls when executing as 32-bit application on ARM (#131)

From: Andreas Schwab <hidden>
Date: 2021-07-05 10:48:47

On Jul 02 2021, Yury Norov wrote:
At least Marvell, Samsung, Huawei, Cisco and Weiyuchen's employer
actively use and develop arm64/ilp32.
This is good to know.  Where can I get the uptodate kernel patches for
ILP32?

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

Re: [linux-audit/audit-kernel] BUG: audit_classify_syscall() fails to properly handle 64-bit syscalls when executing as 32-bit application on ARM (#131)

From: Yury Norov <yury.norov@gmail.com>
Date: 2021-07-07 18:44:49

On Mon, Jul 05, 2021 at 12:48:42PM +0200, Andreas Schwab wrote:
On Jul 02 2021, Yury Norov wrote:
quoted
At least Marvell, Samsung, Huawei, Cisco and Weiyuchen's employer
actively use and develop arm64/ilp32.
This is good to know.  Where can I get the uptodate kernel patches for
ILP32?

Andreas.
The latest kernel supported by me is 5.2:
https://github.com/norov/linux/commits/ilp32-5.2

I know about working ports of ILP32 on 5.7 and 5.10, but didn't see
the code and testing results. Hopefully Paul Moore and Weiyuchen will
share more details.

Yury

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

Re: [linux-audit/audit-kernel] BUG: audit_classify_syscall() fails to properly handle 64-bit syscalls when executing as 32-bit application on ARM (#131)

From: Paul Moore <paul@paul-moore.com>
Date: 2021-07-07 18:54:46

On Wed, Jul 7, 2021 at 2:44 PM Yury Norov [off-list ref] wrote:
On Mon, Jul 05, 2021 at 12:48:42PM +0200, Andreas Schwab wrote:
quoted
On Jul 02 2021, Yury Norov wrote:
quoted
At least Marvell, Samsung, Huawei, Cisco and Weiyuchen's employer
actively use and develop arm64/ilp32.
This is good to know.  Where can I get the uptodate kernel patches for
ILP32?

Andreas.
The latest kernel supported by me is 5.2:
https://github.com/norov/linux/commits/ilp32-5.2

I know about working ports of ILP32 on 5.7 and 5.10, but didn't see
the code and testing results. Hopefully Paul Moore and Weiyuchen will
share more details.
To be clear, I have not done any work with ILP32 nor do I have any
immediate plans to do so (other tasks are higher priority).  I am not
sure what details you are looking for, but there are several
arches/ABIs in the kernel, including regular aarch64, that can serve
as examples on how to enable syscall auditing (presumably that is what
you are interested in with this thread).  There may be some
interesting challenges with ILP32 due to overlap with aarch64
syscalls, but I haven't looked closely enough at ILP32 to say that
with any certainty.

-- 
paul moore
www.paul-moore.com

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help