Re: [PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE

2020-09-24 Thread Kees Cook
On Thu, Sep 24, 2020 at 02:41:36AM +0200, Jann Horn wrote: > On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > > For systems that provide multiple syscall maps based on audit > > architectures (e.g. AUDIT_ARCH_X86_64 and AUDIT_ARCH_I386 via > > CONFIG_COMPAT) or via syscall masks (e.g. x86_x32),

Re: [PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE

2020-09-23 Thread Jann Horn
On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > For systems that provide multiple syscall maps based on audit > architectures (e.g. AUDIT_ARCH_X86_64 and AUDIT_ARCH_I386 via > CONFIG_COMPAT) or via syscall masks (e.g. x86_x32), allow a fast way > to pin the process to a specific syscall table,

[PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE

2020-09-23 Thread Kees Cook
For systems that provide multiple syscall maps based on audit architectures (e.g. AUDIT_ARCH_X86_64 and AUDIT_ARCH_I386 via CONFIG_COMPAT) or via syscall masks (e.g. x86_x32), allow a fast way to pin the process to a specific syscall table, instead of needing to generate all filters with an archite