]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/commit
seccomp: Add filter flag to opt-out of SSB mitigation
authorKees Cook <keescook@chromium.org>
Thu, 3 May 2018 21:56:12 +0000 (14:56 -0700)
committerStefan Bader <stefan.bader@canonical.com>
Mon, 14 May 2018 10:38:14 +0000 (12:38 +0200)
commit3eb6b90c8a1b38b77dce81d295d0d75e1d231969
tree4056d6da718eb71490e7137d24fb917625e87879
parente36b3e50471dca408bec9de2a5ec6f7558bd12e2
seccomp: Add filter flag to opt-out of SSB mitigation

If a seccomp user is not interested in Speculative Store Bypass mitigation
by default, it can set the new SECCOMP_FILTER_FLAG_SPEC_ALLOW flag when
adding filters.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
CVE-2018-3639 (x86)

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
include/linux/seccomp.h
include/uapi/linux/seccomp.h
kernel/seccomp.c
tools/testing/selftests/seccomp/seccomp_bpf.c