diff options
| author | Will Drewry <wad@chromium.org> | 2012-03-09 10:43:50 -0600 |
|---|---|---|
| committer | John Rigby <john.rigby@linaro.org> | 2012-06-25 12:17:09 -0600 |
| commit | 4cc797119cc5abc089c6984b3e7134cad1c8a326 (patch) | |
| tree | 64b76f8245686effb815a00965420c57b8896871 /net/802 | |
| parent | 72fbc34a9e93c4c69e7f674ab1174463cb659446 (diff) | |
UBUNTU: SAUCE: SECCOMP: sk_run_filter: add BPF_S_ANC_SECCOMP_LD_W
Introduces a new BPF ancillary instruction that all LD calls will be
mapped through when skb_run_filter() is being used for seccomp BPF. The
rewriting will be done using a secondary chk_filter function that is run
after skb_chk_filter.
The code change is guarded by CONFIG_SECCOMP_FILTER which is added,
along with the seccomp_bpf_load() function later in this series.
This is based on http://lkml.org/lkml/2012/3/2/141
v15: include seccomp.h explicitly for when seccomp_bpf_load exists.
v14: First cut using a single additional instruction
... v13: made bpf functions generic.
Suggested-by: Indan Zupancic <indan@nul.nu>
Signed-off-by: Will Drewry <wad@chromium.org>
Acked-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: Kees Cook <kees@ubuntu.com>
Diffstat (limited to 'net/802')
0 files changed, 0 insertions, 0 deletions