Kees Cook ce6526e8af seccomp: recheck the syscall after RET_TRACE ...

When RET_TRACE triggers, a tracer may change a syscall into something that
should be filtered by seccomp. This re-runs seccomp after a trace event
to make sure things continue to pass.

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andy Lutomirski <luto@kernel.org>

2016-06-14 10:54:41 -07:00

24 KiB

Raw Blame History

View Raw