Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results

2020-09-24 Thread Kees Cook
On Thu, Sep 24, 2020 at 04:46:05PM -0400, Paul Moore wrote: > On Thu, Sep 24, 2020 at 3:52 PM Kees Cook wrote: > > On Thu, Sep 24, 2020 at 11:28:55AM -0400, Paul Moore wrote: > > > On Thu, Sep 24, 2020 at 3:46 AM Kees Cook wrote: > > > > On Thu, Sep 24, 2020 at 01:47:47AM +0200, Jann Horn wrote:

Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results

2020-09-24 Thread Paul Moore
On Thu, Sep 24, 2020 at 3:52 PM Kees Cook wrote: > On Thu, Sep 24, 2020 at 11:28:55AM -0400, Paul Moore wrote: > > On Thu, Sep 24, 2020 at 3:46 AM Kees Cook wrote: > > > On Thu, Sep 24, 2020 at 01:47:47AM +0200, Jann Horn wrote: > > > > On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > > > > >

Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results

2020-09-24 Thread Kees Cook
On Thu, Sep 24, 2020 at 11:28:55AM -0400, Paul Moore wrote: > On Thu, Sep 24, 2020 at 3:46 AM Kees Cook wrote: > > On Thu, Sep 24, 2020 at 01:47:47AM +0200, Jann Horn wrote: > > > On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > > > > This emulates absolutely the most basic seccomp filters to f

Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results

2020-09-24 Thread Paul Moore
On Thu, Sep 24, 2020 at 3:46 AM Kees Cook wrote: > On Thu, Sep 24, 2020 at 01:47:47AM +0200, Jann Horn wrote: > > On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > > > This emulates absolutely the most basic seccomp filters to figure out > > > if they will always give the same results for a give

Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results

2020-09-24 Thread Kees Cook
On Thu, Sep 24, 2020 at 01:47:47AM +0200, Jann Horn wrote: > On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > > This emulates absolutely the most basic seccomp filters to figure out > > if they will always give the same results for a given arch/nr combo. > > > > Nearly all seccomp filters are bu

Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results

2020-09-23 Thread Jann Horn
On Thu, Sep 24, 2020 at 1:29 AM Kees Cook wrote: > This emulates absolutely the most basic seccomp filters to figure out > if they will always give the same results for a given arch/nr combo. > > Nearly all seccomp filters are built from the following ops: > > BPF_LD | BPF_W| BPF_ABS > BPF_JM