linux/arch/i386
Andrea Arcangeli 4c7fc7220f [PATCH] i386: seccomp fix for auditing/ptrace
This is the same issue as ppc64 before, when returning to userland we
shouldn't re-compute the seccomp check or the task could be killed during
sigreturn when orig_eax is overwritten by the sigreturn syscall.  This was
found by Roland.

This was harmless from a security standpoint, but some i686 users reported
failures with auditing enabled system wide (some distro surprisingly makes
it the default) and I reproduced it too by keeping the whole workload under
strace -f.

Patch is tested and works for me under strace -f.

nobody@athlon:~/cpushare> strace -o /tmp/o -f python seccomp_test.py
make: Nothing to be done for `seccomp_test'.
Starting computing some malicious bytecode
init
load
start
stop
receive_data failure
kill
exit_code 0 signal 9
The malicious bytecode has been killed successfully by seccomp
Starting computing some safe bytecode
init
load
start
stop
174 counts
kill
exit_code 0 signal 0
The seccomp_test.py completed successfully, thank you for testing.

(akpm: collaterally cleaned up a bit of do_syscall_trace() too)

Signed-off-by: Andrea Arcangeli <andrea@cpushare.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-09 13:57:30 -07:00
..
boot [PATCH] Make the bzImage format self-terminating 2005-09-07 16:57:29 -07:00
crypto [PATCH] arch/i386/crypto/aes.c: fix sparse warnings 2005-06-25 16:24:59 -07:00
kernel [PATCH] i386: seccomp fix for auditing/ptrace 2005-09-09 13:57:30 -07:00
lib [PATCH] Remove i386_ksyms.c, almost. 2005-06-23 09:45:11 -07:00
mach-default [PATCH] x86_64: create sysfs entries for cpu only for present cpus 2005-09-07 16:57:16 -07:00
mach-es7000 Merge linux-2.6 with linux-acpi-2.6 2005-09-08 01:45:47 -04:00
mach-generic [PATCH] x86: sutomatically enable bigsmp when we have more than 8 CPUs 2005-09-05 00:06:10 -07:00
mach-visws [PATCH] visws: linkage fix 2005-08-07 10:00:38 -07:00
mach-voyager [PATCH] i386 boottime for_each_cpu broken 2005-09-05 00:06:13 -07:00
math-emu [PATCH] i386: inline assembler: cleanup and encapsulate descriptor and task register management 2005-09-05 00:06:11 -07:00
mm [PATCH] kprobes: prevent possible race conditions i386 changes 2005-09-07 16:57:59 -07:00
oprofile [PATCH] Fix function/macro name collision on i386 oprofile 2005-09-07 16:57:29 -07:00
pci [PATCH] arch/386/pci: remap_pfn_range -> io_remap_pfn_range 2005-09-08 14:57:24 -07:00
power [PATCH] x86: remove redundant TSS clearing 2005-09-05 00:06:13 -07:00
defconfig [ACPI] delete CONFIG_ACPI_PCI 2005-08-25 12:40:44 -04:00
Kconfig Merge linux-2.6 with linux-acpi-2.6 2005-09-08 01:45:47 -04:00
Kconfig.debug [PATCH] i386: add missing Kconfig help text 2005-07-27 16:25:58 -07:00
Makefile [PATCH] biarch compiler support for i386 2005-06-23 09:45:07 -07:00