Hello! On 3/20/20 9:46 AM, John Paul Adrian Glaubitz wrote: > Would it be possible to add seccomp support for m68k in the kernel? > > There are some packages like kscreensaver in Debian that require > libseccomp-dev and it would therefore be desirable if we could > that library on Linux/m68k as well. > >>From what I have learned from Helge Deller who added seccomp for > hppa, it doesn't seem much that is necessary to get seccomp working > on an architecture. > > So, if anyone could work on the kernel part, I could do the work on > libseccomp. I just had another look at the topic and it seems with just need a minimal patch to add SECCOMP and SECCOMP_FILTER support when looking at the changes for riscv64 [1].
The most complex change seem to be the changes in entry.S to add some additional checks for syscall numbers. I think we could just do this for m68k (and SH) as well. The userland land part is trivial as well, I actually added SuperH support to libseccomp today which was rather easy but my pull request was rejected for the time being due to SuperH not supporting SECCOMP_FILTER yet (only basic SECCOMP). So, if someone could do the kernel pieces for m68k, I would work on the userspace changes in libsseccomp. Adrian > [1] > https://github.com/torvalds/linux/commit/5340627e3fe08030988bdda46dd86cd5d5fb7517 > [2] https://github.com/seccomp/libseccomp/pull/271 -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913