]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
projects / mirror_ubuntu-bionic-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 077148a) | patch
seccomp: Add filter flag to opt-out of SSB mitigation
authorKees Cook <keescook@chromium.org>
Thu, 3 May 2018 21:56:12 +0000 (14:56 -0700)
committerStefan Bader <stefan.bader@canonical.com>
Wed, 16 May 2018 11:52:30 +0000 (13:52 +0200)
commit8750de7735463ccaae346462d9d47e30aff5ce6b
treee9fe3d898b083e7467eef6fb33368efc7dd3a765tree
parent077148abbd25295351b1a16421b09dc93e66fc71commit | diff
seccomp: Add filter flag to opt-out of SSB mitigation

If a seccomp user is not interested in Speculative Store Bypass mitigation
by default, it can set the new SECCOMP_FILTER_FLAG_SPEC_ALLOW flag when
adding filters.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
CVE-2018-3639 (x86)

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
include/linux/seccomp.h diff | blob | blame | history
include/uapi/linux/seccomp.h diff | blob | blame | history
kernel/seccomp.c diff | blob | blame | history
tools/testing/selftests/seccomp/seccomp_bpf.c diff | blob | blame | history
ubuntu-bionic-kernel mirror