Kees Cook
b39e0213e5
seccomp: Invalidate seccomp mode to catch death failures
...
commit 495ac3069a6235bfdf516812a2a9b256671bbdf9 upstream.
If seccomp tries to kill a process, it should never see that process
again. To enforce this proactively, switch the mode to something
impossible. If encountered: WARN, reject all syscalls, and attempt to
kill the process again even harder.
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Will Drewry <wad@chromium.org>
Fixes: 8112c4f140fa ("seccomp: remove 2-phase API")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-16 12:44:52 +01:00
..
2022-02-16 12:44:50 +01:00
2022-02-11 08:43:35 +01:00
2021-03-03 18:22:36 +01:00
2021-11-26 11:40:41 +01:00
2020-09-23 10:46:32 +02:00
2021-03-24 11:05:06 +01:00
2019-10-07 18:55:09 +02:00
2021-11-26 11:40:26 +01:00
2022-02-08 18:16:24 +01:00
2021-11-12 14:28:24 +01:00
2021-09-26 13:37:28 +02:00
2022-01-27 09:00:59 +01:00
2021-12-22 09:18:00 +01:00
2022-01-11 13:57:34 +01:00
2018-01-10 09:31:17 +01:00
2018-02-16 20:23:05 +01:00
2017-11-02 11:10:55 +01:00
2020-10-01 13:12:33 +02:00
2022-02-08 18:16:28 +01:00
2020-06-20 10:25:10 +02:00
2020-06-20 10:25:10 +02:00
2019-12-01 09:14:03 +01:00
2018-11-13 11:15:08 -08:00
2017-11-02 11:10:55 +01:00
2020-06-20 10:24:58 +02:00
2020-06-20 10:25:19 +02:00
2021-07-20 16:17:46 +02:00
2018-01-17 09:45:27 +01:00
2020-01-09 10:17:54 +01:00
2018-08-03 07:50:38 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2020-11-18 18:27:58 +01:00
2017-09-23 16:50:20 -04:00
2021-09-22 11:45:32 +02:00
2021-07-11 12:48:12 +02:00
2017-12-20 10:10:18 +01:00
2019-04-20 09:15:05 +02:00
2018-12-05 19:41:17 +01:00
2019-09-21 07:15:38 +02:00
2017-11-02 11:10:55 +01:00
2018-08-03 07:50:22 +02:00
2019-11-24 08:23:15 +01:00
2021-05-22 10:57:39 +02:00
2017-11-02 11:10:55 +01:00
2020-04-24 08:00:44 +02:00
2021-12-08 08:46:54 +01:00
2021-07-11 12:48:13 +02:00
2021-02-10 09:12:08 +01:00
2019-01-13 10:01:02 +01:00
2021-05-22 10:57:24 +02:00
2020-04-02 16:34:20 +02:00
2020-05-27 16:43:05 +02:00
2019-10-17 13:43:19 -07:00
2017-10-03 17:54:26 -07:00
2021-09-22 11:45:32 +02:00
2021-09-26 13:37:28 +02:00
2021-05-26 11:46:58 +02:00
2017-11-02 11:10:55 +01:00
2020-11-18 18:28:02 +01:00
2020-08-26 10:29:54 +02:00
2018-04-24 09:36:22 +02:00
2022-02-16 12:44:52 +01:00
2021-11-26 11:40:24 +01:00
2021-05-22 10:57:35 +02:00
2021-02-07 14:47:41 +01:00
2017-11-02 11:10:55 +01:00
2018-08-15 18:12:47 +02:00
2018-09-05 09:26:36 +02:00
2017-11-02 11:10:55 +01:00
2021-09-26 13:37:28 +02:00
2017-11-02 11:10:55 +01:00
2022-02-16 12:44:50 +01:00
2017-12-25 14:26:21 +01:00
2020-01-09 10:17:53 +01:00
2021-03-03 18:22:47 +01:00
2017-12-20 10:10:18 +01:00
2020-10-14 09:51:10 +02:00
2021-05-22 10:57:35 +02:00
2018-09-09 19:56:00 +02:00
2018-09-09 19:56:00 +02:00
2018-09-05 09:26:42 +02:00
2020-02-28 16:36:05 +01:00
2017-11-06 12:26:49 -08:00
2021-08-04 12:22:14 +02:00