Kees CookandGreg Kroah-Hartman 1dd3dc3892 seccomp: Invalidate seccomp mode to catch death failures ...

[ Upstream commit 495ac3069a ]

If seccomp tries to kill a process, it should never see that process
again. To enforce this proactively, switch the mode to something
impossible. If encountered: WARN, reject all syscalls, and attempt to
kill the process again even harder.

Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Will Drewry <wad@chromium.org>
Fixes: 8112c4f140 ("seccomp: remove 2-phase API")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-03-01 13:16:46 +01:00

..

bpf

bpf: Set uattr->batch.count as zero before batched update or deletion

2024-02-23 08:42:07 +01:00

cgroup

cgroup: Remove duplicates in cgroup v1 tasks file

2023-10-25 11:54:16 +02:00

configs

…

debug

kdb: Fix a potential buffer overflow in kdb_local()

2024-01-25 14:37:56 -08:00

dma

dma-mapping: clear dev->dma_mem to NULL after freeing it

2024-01-25 14:37:45 -08:00

entry

…

events

perf: Fix the nr_addr_filters fix

2024-02-23 08:42:15 +01:00

futex

futex: Don't include process MM in futex key on no-MMU

2023-11-20 11:06:44 +01:00

gcov

…

irq

genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware

2023-11-28 16:54:58 +00:00

kcsan

kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures

2023-07-27 08:43:57 +02:00

livepatch

livepatch: Fix missing newline character in klp_resolve_symbols()

2023-11-20 11:06:52 +01:00

locking

lockdep: Fix block chain corruption

2023-12-08 08:46:09 +01:00

power

PM: hibernate: Enforce ordering during image compression/decompression

2024-02-23 08:41:52 +01:00

printk

printk: ringbuffer: Fix truncating buffer size min_t cast

2023-09-19 12:20:21 +02:00

rcu

rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects

2023-11-28 16:54:57 +00:00

sched

sched/rt: Disallow writing invalid values to sched_rt_period_us

2024-03-01 13:16:43 +01:00

time

hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()

2024-02-23 08:42:31 +01:00

trace

tracing: Inform kmemleak of saved_cmdlines allocation

2024-02-23 08:42:30 +01:00

.gitignore

…

acct.c

…

async.c

async: Introduce async_schedule_dev_nocall()

2024-02-23 08:41:53 +01:00

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()

2023-11-28 16:54:56 +00:00

audit.c

audit: Send netlink ACK before setting connection in auditd_set

2024-02-23 08:42:03 +01:00

audit.h

…

auditfilter.c

…

auditsc.c

audit: fix possible soft lockup in __audit_inode_child()

2023-09-19 12:20:13 +02:00

backtracetest.c

…

bounds.c

…

capability.c

…

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

hrtimers: Push pending hrtimers away from outgoing CPU earlier

2023-12-13 18:26:56 +01:00

crash_core.c

…

crash_dump.c

…

cred.c

cred: switch to using atomic_long_t

2023-12-20 15:44:30 +01:00

delayacct.c

…

dma.c

…

exec_domain.c

…

exit.c

…

extable.c

…

fail_function.c

…

fork.c

kernel/fork: beware of __put_task_struct() calling context

2023-09-23 11:01:05 +02:00

freezer.c

…

gen_kheaders.sh

…

groups.c

…

hung_task.c

…

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

…

kexec_core.c

kexec: fix a memory leak in crash_shrink_memory()

2023-07-27 08:43:40 +02:00

kexec_elf.c

…

kexec_file.c

kexec: support purgatories with .text.hot sections

2023-06-21 15:45:37 +02:00

kexec_internal.h

…

kexec.c

…

kheaders.c

…

kmod.c

…

kprobes.c

kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list

2024-01-25 14:37:51 -08:00

ksysfs.c

…

kthread.c

…

latencytop.c

…

Makefile

…

module_signature.c

…

module_signing.c

…

module-internal.h

…

module.c

modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules

2023-09-19 12:20:02 +02:00

notifier.c

…

nsproxy.c

…

padata.c

crypto: pcrypt - Fix hungtask for PADATA_RESET

2023-11-28 16:54:51 +00:00

panic.c

…

params.c

…

pid_namespace.c

…

pid.c

…

profile.c

…

ptrace.c

…

range.c

…

reboot.c

kernel/reboot: emergency_restart: Set correct system_state

2023-11-28 16:54:58 +00:00

regset.c

…

relay.c

…

resource.c

…

rseq.c

…

scftorture.c

scftorture: Forgive memory-allocation failure if KASAN

2023-09-23 11:01:05 +02:00

scs.c

…

seccomp.c

seccomp: Invalidate seccomp mode to catch death failures

2024-03-01 13:16:46 +01:00

signal.c

…

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

…

stackleak.c

…

stacktrace.c

…

static_call.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

…

sysctl-test.c

…

sysctl.c

sched/rt: Disallow writing invalid values to sched_rt_period_us

2024-03-01 13:16:43 +01:00

task_work.c

…

taskstats.c

…

test_kprobes.c

…

torture.c

torture: Fix hang during kthread shutdown phase

2023-08-30 16:23:17 +02:00

tracepoint.c

…

tsacct.c

…

ucount.c

…

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

usermode_driver.c

…

utsname_sysctl.c

…

utsname.c

…

watch_queue.c

…

watchdog_hld.c

watchdog/perf: more properly prevent false positives with turbo modes

2023-07-27 08:43:40 +02:00

watchdog.c

watchdog: move softlockup_panic back to early_param

2023-11-28 16:54:56 +00:00

workqueue_internal.h

…

workqueue.c

Revert "workqueue: remove unused cancel_work()"

2023-12-08 08:46:13 +01:00