From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752251AbbFOWvH (ORCPT ); Mon, 15 Jun 2015 18:51:07 -0400 Received: from mail-yk0-f180.google.com ([209.85.160.180]:32926 "EHLO mail-yk0-f180.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751054AbbFOWvA (ORCPT ); Mon, 15 Jun 2015 18:51:00 -0400 MIME-Version: 1.0 In-Reply-To: References: <1434207768-16729-1-git-send-email-tycho.andersen@canonical.com> <20150613235250.GA25252@redhat.com> <20150615212017.GA10538@redhat.com> Date: Mon, 15 Jun 2015 15:50:59 -0700 X-Google-Sender-Auth: d2l4TDuFSFb26ADOQSe3O3H2gdo Message-ID: Subject: Re: [PATCH v5] seccomp: add ptrace options for suspend/resume From: Kees Cook To: Oleg Nesterov Cc: Tycho Andersen , LKML , Linux API , Will Drewry , Roland McGrath , Pavel Emelyanov , "Serge E. Hallyn" , Andy Lutomirski Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Jun 15, 2015 at 3:04 PM, Kees Cook wrote: > On Mon, Jun 15, 2015 at 2:20 PM, Oleg Nesterov wrote: >> On 06/15, Kees Cook wrote: >>> >>> On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: >>> > On 06/13, Tycho Andersen wrote: >>> >> >>> >> This patch is the first step in enabling checkpoint/restore of processes >>> >> with seccomp enabled. >>> > >>> > So just in case, I am fine with this version. >>> >>> Should I add your Ack? Though I really like the idea of a >>> "Fine-with-this:" tag. ;) >> >> Yes, please feel free to add ;) > > Thanks! > > I've added this to the seccomp tree. It may be a bit delayed appearing > in -next, due to 4.2 opening soon. > > -Kees Tycho, would you be willing to send some man-page updates for this new interface, so it's documented correctly for ptrace? https://www.kernel.org/doc/man-pages/patches.html Michael, see I thought about linux-api before it was actually in Linus's tree! ;) If you see any issues here, please let us know. Otherwise, hopefully Tycho will get you some updates to ptrace.2 and/or seccomp.2. :) -Kees -- Kees Cook Chrome OS Security From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kees Cook Subject: Re: [PATCH v5] seccomp: add ptrace options for suspend/resume Date: Mon, 15 Jun 2015 15:50:59 -0700 Message-ID: References: <1434207768-16729-1-git-send-email-tycho.andersen@canonical.com> <20150613235250.GA25252@redhat.com> <20150615212017.GA10538@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: In-Reply-To: Sender: linux-api-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: Oleg Nesterov Cc: Tycho Andersen , LKML , Linux API , Will Drewry , Roland McGrath , Pavel Emelyanov , "Serge E. Hallyn" , Andy Lutomirski List-Id: linux-api@vger.kernel.org On Mon, Jun 15, 2015 at 3:04 PM, Kees Cook wrote: > On Mon, Jun 15, 2015 at 2:20 PM, Oleg Nesterov wrote: >> On 06/15, Kees Cook wrote: >>> >>> On Sat, Jun 13, 2015 at 4:52 PM, Oleg Nesterov wrote: >>> > On 06/13, Tycho Andersen wrote: >>> >> >>> >> This patch is the first step in enabling checkpoint/restore of processes >>> >> with seccomp enabled. >>> > >>> > So just in case, I am fine with this version. >>> >>> Should I add your Ack? Though I really like the idea of a >>> "Fine-with-this:" tag. ;) >> >> Yes, please feel free to add ;) > > Thanks! > > I've added this to the seccomp tree. It may be a bit delayed appearing > in -next, due to 4.2 opening soon. > > -Kees Tycho, would you be willing to send some man-page updates for this new interface, so it's documented correctly for ptrace? https://www.kernel.org/doc/man-pages/patches.html Michael, see I thought about linux-api before it was actually in Linus's tree! ;) If you see any issues here, please let us know. Otherwise, hopefully Tycho will get you some updates to ptrace.2 and/or seccomp.2. :) -Kees -- Kees Cook Chrome OS Security