seccomp, v2: Add support for per-thread tracking

Submitted by Kirill Gorkunov on March 20, 2018, 9:42 p.m.

Details

Reviewer None
Submitted March 20, 2018, 9:42 p.m.
Last Updated April 5, 2018, 8:16 a.m.
Revision 2

Revisions

SERIES REVISION LOOKS STRANGE. Please double-check patch list and the ordering before proceeding.

Patches download mbox

# Name Submitter State
[01/28] seccomp: compel -- Add PTRACE_SECCOMP_GET_METADATA data Cyrill Gorcunov Rejected
[02/28] seccomp: Fetch seccomp flags if kernel provides Cyrill Gorcunov Rejected
[03/28] seccomp: Move seccomp_info into seccomp.h Cyrill Gorcunov Rejected
[04/28] seccomp: Collect seccomp data on per-thread basis Cyrill Gorcunov Rejected
[05/28] seccomp: Use collected seccomp_entry to figure out if filter is present Cyrill Gorcunov Rejected
[06/28] seccomp: Define prefix for logging Cyrill Gorcunov Rejected
[07/28] seccomp: Drop pstree_item from find_inherited Cyrill Gorcunov Rejected
[08/28] seccomp: Drop pi_creds from dmp_info Cyrill Gorcunov Rejected
[09/28] seccomp: Use tid_real member name Cyrill Gorcunov Rejected
[10/28] seccomp: images, core -- Move seccomp data into per-thread origin Cyrill Gorcunov Rejected
[11/28] seccomp: Move filter position into seccomp_entry Cyrill Gorcunov Rejected
[12/28] seccomp: Untaggle entries from process_tree Cyrill Gorcunov Rejected
[13/28] seccomp: Drop leftover member from pstree Cyrill Gorcunov Rejected
[14/28] seccomp: Produce thread core records Cyrill Gorcunov Rejected
[15/28] seccomp: Add support of per thread filters on dump Cyrill Gorcunov Rejected
[16/28] seccomp: Speedup entry cleaning Cyrill Gorcunov Rejected
[17/28] seccomp: Rename last_filter to img_filter_pos Cyrill Gorcunov Rejected
[18/28] seccomp: Don't use BUG_ON in dump_seccomp_filters Cyrill Gorcunov Rejected
[19/28] seccomp: Add restore of per-thread filters Cyrill Gorcunov New
[20/28] seccomp: Try use tsync flag if possible Cyrill Gorcunov Rejected
[21/28] seccomp: Always setup chain flags Cyrill Gorcunov Rejected
[22/28] seccomp: collect_filters -- Drop unneeded parent Cyrill Gorcunov Rejected
[23/28] seccomp: dump_seccomp_filters -- Be ready for chains absence Cyrill Gorcunov Rejected
[24/28] seccomp: Drop filter mode on tsync propagation Cyrill Gorcunov Rejected
[25/28] seccomp: Drop no longer needed comment Cyrill Gorcunov Rejected
[26/28] seccomp: Allow to dump thread with different seccomps Cyrill Gorcunov Rejected
[27/28] seccomp: Fetch mode for alive tasks only Cyrill Gorcunov Rejected
[28/28] seccomp: test -- Add seccomp_filter_threads Cyrill Gorcunov Rejected

Tests

SERIES REVISION LOOKS STRANGE. Please double-check patch list and the ordering before proceeding.

Patches download mbox

# Name Submitter State
[01/28] seccomp: compel -- Add PTRACE_SECCOMP_GET_METADATA data Cyrill Gorcunov Rejected
[02/28] seccomp: Fetch seccomp flags if kernel provides Cyrill Gorcunov Rejected
[03/28] seccomp: Move seccomp_info into seccomp.h Cyrill Gorcunov Rejected
[04/28] seccomp: Collect seccomp data on per-thread basis Cyrill Gorcunov Rejected
[05/28] seccomp: Use collected seccomp_entry to figure out if filter is present Cyrill Gorcunov Rejected
[06/28] seccomp: Define prefix for logging Cyrill Gorcunov Rejected
[07/28] seccomp: Drop pstree_item from find_inherited Cyrill Gorcunov Rejected
[08/28] seccomp: Drop pi_creds from dmp_info Cyrill Gorcunov Rejected
[09/28] seccomp: Use tid_real member name Cyrill Gorcunov Rejected
[10/28] seccomp: images, core -- Move seccomp data into per-thread origin Cyrill Gorcunov Rejected
[11/28] seccomp: Move filter position into seccomp_entry Cyrill Gorcunov Rejected
[12/28] seccomp: Untaggle entries from process_tree Cyrill Gorcunov Rejected
[13/28] seccomp: Drop leftover member from pstree Cyrill Gorcunov Rejected
[14/28] seccomp: Produce thread core records Cyrill Gorcunov Rejected
[15/28] seccomp: Add support of per thread filters on dump Cyrill Gorcunov Rejected
[16/28] seccomp: Speedup entry cleaning Cyrill Gorcunov Rejected
[17/28] seccomp: Rename last_filter to img_filter_pos Cyrill Gorcunov Rejected
[18/28] seccomp: Don't use BUG_ON in dump_seccomp_filters Cyrill Gorcunov Rejected
[19/28] seccomp: Add restore of per-thread filters Kirill Gorkunov Rejected
[20/28] seccomp: Try use tsync flag if possible Cyrill Gorcunov Rejected
[21/28] seccomp: Always setup chain flags Cyrill Gorcunov Rejected
[22/28] seccomp: collect_filters -- Drop unneeded parent Cyrill Gorcunov Rejected
[23/28] seccomp: dump_seccomp_filters -- Be ready for chains absence Cyrill Gorcunov Rejected
[24/28] seccomp: Drop filter mode on tsync propagation Cyrill Gorcunov Rejected
[25/28] seccomp: Drop no longer needed comment Cyrill Gorcunov Rejected
[26/28] seccomp: Allow to dump thread with different seccomps Cyrill Gorcunov Rejected
[27/28] seccomp: Fetch mode for alive tasks only Cyrill Gorcunov Rejected
[28/28] seccomp: test -- Add seccomp_filter_threads Cyrill Gorcunov Rejected

Tests