linux-stable.git/tools/testing/selftests/seccomp, branch linux-4.4.y

seccomp: Add filter flag to opt-out of SSB mitigation

2018-07-25T08:18:27+00:00

commit 00a02d0c502a06d15e07b857f8ff921e3e402675 upstream

If a seccomp user is not interested in Speculative Store Bypass mitigation
by default, it can set the new SECCOMP_FILTER_FLAG_SPEC_ALLOW flag when
adding filters.

Signed-off-by: Kees Cook 
Signed-off-by: Thomas Gleixner 
Signed-off-by: David Woodhouse 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Srivatsa S. Bhat 
Reviewed-by: Matt Helsley (VMware) 
Reviewed-by: Alexey Makhalov 
Reviewed-by: Bo Gan 
Signed-off-by: Greg Kroah-Hartman

selftest/seccomp: Fix the seccomp(2) signature

2018-07-25T08:18:22+00:00

commit 505ce68c6da3432454c62e43c24a22ea5b1d754b upstream

Signed-off-by: Mickaël Salaün 
Cc: Andy Lutomirski 
Cc: Kees Cook 
Cc: Shuah Khan 
Cc: Will Drewry 
Acked-by: Kees Cook 
Signed-off-by: Shuah Khan 
Signed-off-by: Srivatsa S. Bhat 
Reviewed-by: Matt Helsley (VMware) 
Reviewed-by: Alexey Makhalov 
Reviewed-by: Bo Gan 
Signed-off-by: Greg Kroah-Hartman

selftest/seccomp: Fix the flag name SECCOMP_FILTER_FLAG_TSYNC

2018-07-25T08:18:22+00:00

commit 6c045d07bb305c527140bdec4cf8ab50f7c980d8 upstream

Rename SECCOMP_FLAG_FILTER_TSYNC to SECCOMP_FILTER_FLAG_TSYNC to match
the UAPI.

Signed-off-by: Mickaël Salaün 
Cc: Andy Lutomirski 
Cc: Kees Cook 
Cc: Shuah Khan 
Cc: Will Drewry 
Acked-by: Kees Cook 
Signed-off-by: Shuah Khan 
Signed-off-by: Srivatsa S. Bhat 
Reviewed-by: Matt Helsley (VMware) 
Reviewed-by: Alexey Makhalov 
Reviewed-by: Bo Gan 
Signed-off-by: Greg Kroah-Hartman

selftests/seccomp: Get page size from sysconf

2015-11-18T23:56:53+00:00

The commit fd88d16c58c2 ("selftests/seccomp: Be more precise with
syscall arguments.") use PAGE_SIZE directly which lead to build
failure on arm64.

Replace it with generic interface(sysconf(_SC_PAGESIZE)) to fix this
failure.

Build and test successful on x86_64 and arm64.

Signed-off-by: Bamvor Jian Zhang 
Acked-by: Kees Cook 
Tested-by: Michael Ellerman 
Signed-off-by: Shuah Khan

selftests/seccomp: Be more precise with syscall arguments.

2015-11-02T21:41:02+00:00

Certain syscall emulation layers strictly check that the number of
arguments match what the syscall handler expects. The KILL_one_arg_one and
KILL_one_arg_six tests passed more parameters than expected to various
syscalls, causing failures in this emulation mode. Instead, test using
syscalls that take the appropriate number of arguments.

Signed-off-by: Robert Sesek 
Signed-off-by: Kees Cook 
Signed-off-by: Shuah Khan

selftests/seccomp: build and pass on arm64

2015-10-16T02:06:27+00:00

Changing arm64 syscalls is done via a specific register set, more like s390
than like arm (specific ptrace call) and x86 (part of general registers).
Since (restarting) poll doesn't exist on arm64, switch to using nanosleep
for testing restart_syscall. And since it looks like the syscall ABI is
inconsistent on arm-compat, so we must work around it (and document it) in
the test.

Signed-off-by: Kees Cook 
Signed-off-by: Shuah Khan

selftests/seccomp: add support for s390

2015-09-14T22:41:37+00:00

This adds support for s390 to the seccomp selftests. Some improvements
were made to enhance the accuracy of failure reporting, and additional
tests were added to validate assumptions about the currently traced
syscall. Also adds early asserts for running on older kernels to avoid
noise when the seccomp syscall is not implemented.

Signed-off-by: Kees Cook 
Signed-off-by: Shuah Khan

selftests/seccomp: Add powerpc support

2015-07-30T04:35:36+00:00

Wire up the syscall number and regs so the tests work on powerpc.

With the powerpc kernel support just merged, all tests pass on ppc64,
ppc64 (compat), ppc64le, ppc, ppc64e and ppc64e (compat).

Acked-by: Kees Cook 
Signed-off-by: Michael Ellerman

selftests/seccomp: Make seccomp tests work on big endian

2015-07-30T04:35:36+00:00

The seccomp_bpf test uses BPF_LD|BPF_W|BPF_ABS to load 32-bit values
from seccomp_data->args. On big endian machines this will load the high
word of the argument, which is not what the test wants.

Borrow a hack from samples/seccomp/bpf-helper.h which changes the offset
on big endian to account for this.

Signed-off-by: Michael Ellerman 
Acked-by: Kees Cook

selftests: add seccomp suite

2015-06-17T23:12:32+00:00

This imports the existing seccomp test suite into the kernel's selftests
tree. It contains extensive testing of seccomp features and corner cases.
There remain additional tests to move into the kernel tree, but they have
not yet been ported to all the architectures seccomp supports:
https://github.com/redpig/seccomp/tree/master/tests

Signed-off-by: Kees Cook 
Signed-off-by: Shuah Khan