search

KSPP / linux

Linux kernel source tree (Kernel Self Protection Project)
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
Other
81 stars 5 forks source link

Check for mismatch between seccomp_mode and TIF_SECCOMP #173

Open kees opened 2 years ago

kees commented 2 years ago

https://docs.google.com/presentation/d/1YMlOERClX6Yi8Fb9DYxBBJ5MYB1C-_F75XKkoSmbl8k/edit https://elixir.bootlin.com/linux/v5.15/source/kernel/entry/common.c#L212

Check for corruption of TIF_SECCOMP. This shouldn't be expensive, but it's possible the check will hit a separate cacheline?