diff options
| author | Christopher Lusk <clusk@northecho.dev> | 2026-09-13 09:17:53 -0400 |
|---|---|---|
| committer | Greg Ungerer <gerg@kernel.org> | 2026-10-12 13:47:41 +1000 |
| commit | 48859f8018d93bd93ef35f7430fdf5b97f2f9715 (patch) | |
| tree | 2adf5124d91b62b86b42bdc788fa4428a8107cf0 /scripts/Makefile.thinlto | |
| parent | 39e5ca862bd71ddbc0aae2cc3dbc7732c94a9cf6 (diff) | |
| download | linux-next-48859f8018d93bd93ef35f7430fdf5b97f2f9715.tar.gz linux-next-48859f8018d93bd93ef35f7430fdf5b97f2f9715.zip | |
m68k: Fix seccomp filtering on ColdFire and 68000
m68k selects HAVE_ARCH_SECCOMP_FILTER for all configurations, but the
ColdFire and 68000 syscall entry paths only branch to
syscall_trace_enter() for TIF_SYSCALL_TRACE. TIF_SECCOMP alone falls
through to syscall dispatch, leaving installed filters ineffective.
Test the combined TIF_SYSCALL_TRACE and TIF_SECCOMP mask in both paths
and route either flag through the existing slow path. Leave the classic
MMU syscall entry implementation unchanged.
Validated the combined test under QEMU mcf5208evb (ColdFire): filters
denying getpid, openat, unlinkat, and reboot each returned -EPERM. A
classic-MMU control (q800) denied the filtered getpid syscall both before
and after this change. The 68000 path shares the same source-level
omission and receives the identical masked test but was not separately
emulated. Compile-tested W=1 with CONFIG_SECCOMP_FILTER=y on both
m5208evb_defconfig and a custom no-MMU UCSIMM configuration; the latter
built arch/m68k/68000/entry.o and vmlinux.
Fixes: 6baaade15594 ("m68k: Add kernel seccomp support")
Cc: stable@vger.kernel.org # v6.3+
Suggested-by: Andreas Schwab <schwab@linux-m68k.org>
Assisted-by: Claude:claude-opus-4-8
Assisted-by: Codex:gpt-5.6-sol
Signed-off-by: Christopher Lusk <clusk@northecho.dev>
Signed-off-by: Greg Ungerer <gerg@linux-m68k.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions
