p71924506
/
linux_old1
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

seccomp: create internal mode-setting function 

In preparation for having other callers of the seccomp mode setting
logic, split the prctl entry point away from the core logic that performs
seccomp mode setting.

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Oleg Nesterov <oleg@redhat.com>
Reviewed-by: Andy Lutomirski <luto@amacapital.net>
This commit is contained in:
Kees Cook 2014-05-21 15:02:11 -07:00
parent c04f9d61ca
commit d78ab02c2c
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
kernel/seccomp.c
View File

@ -473,7 +473,7 @@ long prctl_get_seccomp(void)
} }
/** /**
* prctl_set_seccomp: configures current->seccomp.mode * seccomp_set_mode: internal function for setting seccomp mode
* @seccomp_mode: requested mode to use * @seccomp_mode: requested mode to use
* @filter: optional struct sock_fprog for use with SECCOMP_MODE_FILTER * @filter: optional struct sock_fprog for use with SECCOMP_MODE_FILTER
* *
@ -486,7 +486,7 @@ long prctl_get_seccomp(void)
* *
* Returns 0 on success or -EINVAL on failure. * Returns 0 on success or -EINVAL on failure.
*/ */
long prctl_set_seccomp(unsigned long seccomp_mode, char __user *filter) static long seccomp_set_mode(unsigned long seccomp_mode, char __user *filter)
{ {
long ret = -EINVAL; long ret = -EINVAL;
@ -517,3 +517,15 @@ long prctl_set_seccomp(unsigned long seccomp_mode, char __user *filter)
out: out:
return ret; return ret;
} }
/**
* prctl_set_seccomp: configures current->seccomp.mode
* @seccomp_mode: requested mode to use
* @filter: optional struct sock_fprog for use with SECCOMP_MODE_FILTER
*
* Returns 0 on success or -EINVAL on failure.
*/
long prctl_set_seccomp(unsigned long seccomp_mode, char __user *filter)
{
return seccomp_set_mode(seccomp_mode, filter);
}