Kees Cook 0b1174054e seccomp: Enable speculation flaw mitigations ... commit 5c3070890d06ff82eecb808d02d2ca39169533ef upstream When speculation flaw mitigations are opt-in (via prctl), using seccomp will automatically opt-in to these protections, since using seccomp indicates at least some level of sandboxing is desired. Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: David Woodhouse <dwmw@amazon.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Srivatsa S. Bhat <srivatsa@csail.mit.edu> Reviewed-by: Matt Helsley (VMware) <matt.helsley@gmail.com> Reviewed-by: Alexey Makhalov <amakhalov@vmware.com> Reviewed-by: Bo Gan <ganb@vmware.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-07-25 10:18:27 +02:00
..
bpf	bpf: map_get_next_key to return first key on NULL	2018-05-16 10:06:46 +02:00
configs
debug	kdb: make "mdr" command repeat	2018-05-30 07:49:17 +02:00
events	perf/core: Fix perf_output_read_group()	2018-05-30 07:49:12 +02:00
gcov
irq	genirq: Use cpumask_available() for check of cpumask variable	2018-04-08 11:51:57 +02:00
livepatch
locking	locking/qspinlock: Ensure node->count is updated before initialising node	2018-05-30 07:48:57 +02:00
power	PM / hibernate: Fix oops at snapshot_write()	2018-07-17 11:31:46 +02:00
printk
rcu
sched	sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning	2018-05-30 07:49:08 +02:00
time	time: Make sure jiffies_to_msecs() preserves non-zero time periods	2018-07-03 11:21:30 +02:00
trace	tracing: Fix missing return symbol in function_graph output	2018-07-11 16:03:48 +02:00
.gitignore
acct.c
async.c
audit.c	audit: return on memory error to avoid null pointer dereference	2018-05-30 07:49:16 +02:00
audit.h
audit_fsnotify.c
audit_tree.c
audit_watch.c
auditfilter.c
auditsc.c	audit: move calcs after alloc and check when logging set loginuid	2018-05-26 08:48:49 +02:00
backtracetest.c
bounds.c
capability.c
cgroup.c
cgroup_freezer.c
cgroup_pids.c
compat.c
configs.c
context_tracking.c
cpu.c
cpu_pm.c
cpuset.c
crash_dump.c
cred.c
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c	kernel/exit.c: avoid undefined behaviour when calling wait4()	2018-05-26 08:48:51 +02:00
extable.c
fork.c
freezer.c
futex.c	futex: futex_wake_op, fix sign_extend32 sign bits	2018-05-26 08:48:51 +02:00
futex_compat.c
groups.c
hung_task.c
irq_work.c
jump_label.c
kallsyms.c
kcmp.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kexec.c
kexec_core.c
kexec_file.c
kexec_internal.h
kmod.c
kprobes.c
ksysfs.c
kthread.c
latencytop.c
Makefile
membarrier.c
memremap.c
module-internal.h
module.c
module_signing.c
notifier.c
nsproxy.c
padata.c
panic.c
params.c
pid.c	pidns: disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid()	2018-04-13 19:50:03 +02:00
pid_namespace.c
profile.c
ptrace.c
range.c
reboot.c
relay.c	kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE	2018-05-30 07:49:00 +02:00
resource.c	resource: fix integer overflow at reallocation	2018-04-24 09:32:05 +02:00
seccomp.c	seccomp: Enable speculation flaw mitigations	2018-07-25 10:18:27 +02:00
signal.c	kernel/signal.c: avoid undefined behaviour in kill_something_info	2018-05-30 07:48:52 +02:00
smp.c
smpboot.c
smpboot.h
softirq.c
stacktrace.c
stop_machine.c
sys.c	nospec: Allow getting/setting on non-current task	2018-07-25 10:18:26 +02:00
sys_ni.c
sysctl.c
sysctl_binary.c
task_work.c
taskstats.c
test_kprobes.c
torture.c
tracepoint.c	tracepoint: Do not warn on ENOMEM	2018-05-16 10:06:47 +02:00
tsacct.c
uid16.c
up.c
user-return-notifier.c
user.c
user_namespace.c
utsname.c
utsname_sysctl.c
watchdog.c
workqueue.c	workqueue: use put_device() instead of kfree()	2018-05-30 07:49:04 +02:00
workqueue_internal.h