summaryrefslogtreecommitdiff
path: root/scripts/Makefile.thinlto
diff options
context:
space:
mode:
authorChristopher Lusk <clusk@northecho.dev>2026-09-13 09:17:53 -0400
committerGreg Ungerer <gerg@kernel.org>2026-10-12 13:47:41 +1000
commit48859f8018d93bd93ef35f7430fdf5b97f2f9715 (patch)
tree2adf5124d91b62b86b42bdc788fa4428a8107cf0 /scripts/Makefile.thinlto
parent39e5ca862bd71ddbc0aae2cc3dbc7732c94a9cf6 (diff)
downloadlinux-next-48859f8018d93bd93ef35f7430fdf5b97f2f9715.tar.gz
linux-next-48859f8018d93bd93ef35f7430fdf5b97f2f9715.zip
m68k: Fix seccomp filtering on ColdFire and 68000
m68k selects HAVE_ARCH_SECCOMP_FILTER for all configurations, but the ColdFire and 68000 syscall entry paths only branch to syscall_trace_enter() for TIF_SYSCALL_TRACE. TIF_SECCOMP alone falls through to syscall dispatch, leaving installed filters ineffective. Test the combined TIF_SYSCALL_TRACE and TIF_SECCOMP mask in both paths and route either flag through the existing slow path. Leave the classic MMU syscall entry implementation unchanged. Validated the combined test under QEMU mcf5208evb (ColdFire): filters denying getpid, openat, unlinkat, and reboot each returned -EPERM. A classic-MMU control (q800) denied the filtered getpid syscall both before and after this change. The 68000 path shares the same source-level omission and receives the identical masked test but was not separately emulated. Compile-tested W=1 with CONFIG_SECCOMP_FILTER=y on both m5208evb_defconfig and a custom no-MMU UCSIMM configuration; the latter built arch/m68k/68000/entry.o and vmlinux. Fixes: 6baaade15594 ("m68k: Add kernel seccomp support") Cc: stable@vger.kernel.org # v6.3+ Suggested-by: Andreas Schwab <schwab@linux-m68k.org> Assisted-by: Claude:claude-opus-4-8 Assisted-by: Codex:gpt-5.6-sol Signed-off-by: Christopher Lusk <clusk@northecho.dev> Signed-off-by: Greg Ungerer <gerg@linux-m68k.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions