Commit Graph

18 Commits

Author SHA1 Message Date
Simone Weiß
7e55fd135f libseccomp: Upgrade 2.5.5 -> 2.6
Changelog:
- Update the syscall table for Linux v6.13
- Add support for new arches: SuperH little and big endian, LoongArch, and
  32-bit Motorola 68000
- Add multiplexed syscall support for more arches: MIPS, SuperH, and PPC
- Consolidate and simplify handling of multiplexed syscalls
- Add support for the SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV flag
- Add support for transactions with the seccomp_transaction_start(),
  seccomp_transaction_commit(), and seccomp_transaction_reject() APIs
- Add a seccomp_precompute() API to generate the seccomp BPF filter prior to
  seccomp_load() or seccomp_export_bpf_mem()
- Add support for binary tree filters without syscalls
- Add support for the kernel’s implementation change of
  SECCOMP_IOCTL_NOTIF_ID_VALID
- Add Python binding support for retrieving the notification file descriptor
- Improved tooling to help track syscall table updates in the Linux kernel
- Handle EINVAL error from the kernel when the WAIT_KILLABLE_RECV flag is
  erroneously provided to the kernel
- Fix a seccomp userspace notification issue where the file descriptor was
  being requested more than once
- Fix a bug where the internal filter state could be corrupted when a filter
  rule addition fails
- Fix potential memory leak in the internal management of filter snapshots
- Utilize Cython rather than distutils in the Python bindings, due to
  distutils’ deprecation
- Many test and CI improvements and fixes
- Many documentation improvements and updates

(From OE-Core rev: 549a477660bd6ccda842b4ed34814b53470d08d8)

Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-02-05 13:00:45 +00:00
Khem Raj
55a03fca7f libseccomp: Fix build when python packageconfig is enabled
It needs additional tweaks with python enabled

(From OE-Core rev: c3568ee00d3b7f6b421020dfec8005a27c2e9164)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-04-12 17:27:53 +01:00
Ross Burton
af61f98f00 libseccomp: remove redundant PV assignment
(From OE-Core rev: 0661d29a6482d9534d221b7d3d0e124cad62b13a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-24 10:39:07 +00:00
Wang Mingyu
4d7f5a305c libseccomp: upgrade 2.5.4 -> 2.5.5
Changelog:
==========
Update the syscall table for Linux v6.7-rc3

(From OE-Core rev: 35c92894ec43fa58b0a8e0aab5974d1113f87283)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-23 08:46:00 +00:00
Narpat Mali
990b7923ea libseccomp: fix for the ptest result format
The output of libseccomp ptest should follow a unified format as
per this https://wiki.yoctoproject.org/wiki/Ptest

Replaced the test results SUCCESS, FAILURE & SKIPPPED with PASS,
FAIL & SKIP and printing the ptest result with the below format
result: testname

(From OE-Core rev: 30d025a8641cfcce5412b5f021478777620b55f1)

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-02-19 07:47:53 +00:00
Chen Qi
c48d92e080 libseccomp: fix typo in DESCRIPTION
Fix typo in DESCRIPTION: and -> an.

(From OE-Core rev: 349e63045298054f9454025d793c67284fce750b)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-01-12 23:08:59 +00:00
Peter Kjellerstedt
d6092687d4 libseccomp: Correct LIC_FILES_CHKSUM
Previously, only the first line of the LICENSE file was included,
which only covered the license name and thus would not detect a change
to the version (or anything else for that matter).

(From OE-Core rev: 3ac45755dffc611fb46f5cd1c07f4876d3094893)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-06-06 13:36:05 +01:00
Joerg Vehlow
f213de05de libseccomp: Add missing files for ptests
pfc files are used e.g. in 38-basic-pfc_coverage.sh
valgrind_test.supp is required, when valgrind is installed, otherwise
all valgrind tests fail

(From OE-Core rev: 32ba67bc37b5ca73f7d29cb6c7de281ab8f824bd)

Signed-off-by: Joerg Vehlow <joerg.vehlow@aox.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-05-27 23:50:48 +01:00
Alexander Kanavin
ab73f2d0a5 libseccomp: upgrade 2.5.3 -> 2.5.4
(From OE-Core rev: 630a7c184a936503ee4a7155925fb4746a6d93da)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-05-05 21:17:37 +01:00
Richard Purdie
b0130fcf91 meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.

(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-20 16:45:25 +00:00
Alexander Kanavin
2ce06739ed libseccomp: update 2.5.2 -> 2.5.3
Drop all patches from MR https://github.com/seccomp/libseccomp/pull/327
as it has stalled, and rebasing them is non-trivial. Please land the
changes upstream first.

Drop 0001-configure.ac-Bump-version-to-2.5.99.patch as upstream
has addressed the issue.

(From OE-Core rev: 0374850b8abeecd3721215713481d9a802a19f46)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-12-08 20:22:11 +00:00
Richard Purdie
ba2f6c64a1 recipes: Update github.com urls to use https
Github has announced there will be no more git:// fetching from their servers:

https://github.blog/2021-09-01-improving-git-protocol-security-github/#no-more-unauthenticated-git

and they're about to start having brownout periods to encourage people
to update. This runs the conversion script over OE-Core to update our
urls to use https instead of git.

(From OE-Core rev: b37b61e9a1e448a34957db9ae39285d21352552e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-11-03 10:12:42 +00:00
Khem Raj
2eb0630516 libseccomp: Upgrade to 2.5.2 and beyond
Forward port the rv32 port

(From OE-Core rev: 269133fed2854cdfe9c23a17a86fb1f1ea7e11cb)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-10-11 18:41:39 +01:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
Khem Raj
cee5bfa1cf libseccomp: Update to main branch
Get RV32 imlementation

(From OE-Core rev: 752eb3839a46c70f2a847854386e9929d0e6d680)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-07-16 21:23:43 +01:00
Richard Purdie
280a83d4af libseccomp: Fix reproducibility issue
Rather than installing libtool wrapper scripts which won't work on target
and aren't reproducible, use the real binaries.

(From OE-Core rev: 8afdf055b7b8bad6f0f13c3cd184d019c50a1e25)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-26 14:14:42 +01:00
Richard Purdie
e07821846b libseccomp: Add MAINTAINERS entry and HOMEPAGE
Add entries for the migrated recipe to passify the various checks.

(From OE-Core rev: cd49367af2b3daa8d3012ae2b8ace380d41cc0b9)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-26 14:14:42 +01:00
Armin Kuster
241c7d2e67 libseccomp: move recipe from meta-security to core
ptest results:
Regression Test Summary
 tests run: 1404
 tests skipped: 369
 tests passed: 1402
 tests failed: 2
 tests errored: 154

Add feature_check so that the other recipes who can take
advantage of this funtionality can enable it.

(From OE-Core rev: 5b0182f5c01c8b10b4b65f8af55d682be4839947)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-26 14:14:42 +01:00