Kees Cook b39e0213e5 seccomp: Invalidate seccomp mode to catch death failures
commit 495ac3069a6235bfdf516812a2a9b256671bbdf9 upstream.

If seccomp tries to kill a process, it should never see that process
again. To enforce this proactively, switch the mode to something
impossible. If encountered: WARN, reject all syscalls, and attempt to
kill the process again even harder.

Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Will Drewry <wad@chromium.org>
Fixes: 8112c4f140fa ("seccomp: remove 2-phase API")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-16 12:44:52 +01:00
..
2020-09-23 10:46:32 +02:00
2019-12-01 09:14:03 +01:00
2021-07-20 16:17:46 +02:00
2018-08-03 07:50:38 +02:00
2018-08-03 07:50:22 +02:00
2021-02-10 09:12:08 +01:00
2020-04-02 16:34:20 +02:00
2021-02-07 14:47:41 +01:00
2020-01-09 10:17:53 +01:00