openssh bugs - Feb 2013 - [Bug 2069] New: arm support for sandbox_seccomp_filter

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

            Bug ID: 2069
           Summary: arm support for sandbox_seccomp_filter
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 6.1p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: shawnlandden at gmail.com

Created attachment 2217
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2217&action=edit
support seccomp on arm

linux 3.8 have support for seccomp filter (SECCOMP_MODE_FILTER) on arm

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Comment on attachment 2217
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2217
support seccomp on arm

Excellent - thanks for this.
>diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
>index ef2b13c..2d71886 100644
>--- a/sandbox-seccomp-filter.c
>+++ b/sandbox-seccomp-filter.c
>@@ -44,6 +44,7 @@
> #include <linux/audit.h>
> #include <linux/filter.h>
> #include <linux/seccomp.h>
>+#include <elf.h>
Is this extra header needed? I couldn't see any use of it.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

--- Comment #2 from shawnlandden at gmail.com ---
>Is this extra header needed? I couldn't see any use of it.
elf.h is needed for EM_ARM, which is part of the definition of
AUDIT_ARCH_ARM in linux/audit.h:

#define EM_ARM          40              /* ARM */

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org
   Attachment #2223|                            |ok?(dtucker at zip.com.au)
              Flags|                            |
   Attachment #2217|0                           |1
        is obsolete|                            |

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
Created attachment 2223
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2223&action=edit
Tweaked Linux seccomp-bpf ARM support

Some additional configure-time checks.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2223|ok?(dtucker at zip.com.au)     |ok+
              Flags|                            |

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
applied - thanks. This will be in OpenSSH-6.2

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2069

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
Close all resolved bugs after 7.3p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.