seccomp 1
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 11 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | seccomp 2arch/ include/ kernel/ | +27 | 0 replies | |
| 2/3 | seccomp 3fs/ | +22 | 0 replies | |
| 3/3 | seccomp 0kernel/ | +18 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [MODERATED] [PATCH SSBv11 0/3] seccomp 1
As seccomp use overlaps best (though not perfectly) with applications most likely to want speculation flaw mitigations enabled, seccomp will enable them when seccomp is enabled for a task. Also adds a line to /proc/$pid/status for examining the mitigation state of a task.
-Kees
Kees Cook (3):
nospec: Allow getting/setting on non-current task
proc: Provide details on speculation flaw mitigations
seccomp: Enable speculation flaw mitigations
arch/x86/kernel/cpu/bugs.c | 27 ++++++++++++++++----------- fs/proc/array.c | 22 ++++++++++++++++++++++ include/linux/nospec.h | 7 +++++-- kernel/seccomp.c | 18 ++++++++++++++++++ kernel/sys.c | 10 ++++++---- 5 files changed, 67 insertions(+), 17 deletions(-)
Signature · 1 line
2.17.0