]> git.baikalelectronics.ru Git - kernel.git/commit
seccomp: Add filter flag to opt-out of SSB mitigation
authorKees Cook <keescook@chromium.org>
Thu, 3 May 2018 21:56:12 +0000 (14:56 -0700)
committerThomas Gleixner <tglx@linutronix.de>
Fri, 4 May 2018 22:51:44 +0000 (00:51 +0200)
commit76e5b63db388f9436e0283ede3e002563e64f3b6
treed1f2bd8ff6733e43840a199d11e455790d7c21c8
parent09b5f3304098799519344ed7c28995c11b4ca762
seccomp: Add filter flag to opt-out of SSB mitigation

If a seccomp user is not interested in Speculative Store Bypass mitigation
by default, it can set the new SECCOMP_FILTER_FLAG_SPEC_ALLOW flag when
adding filters.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
include/linux/seccomp.h
include/uapi/linux/seccomp.h
kernel/seccomp.c
tools/testing/selftests/seccomp/seccomp_bpf.c