Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751962AbbD3MeU (ORCPT ); Thu, 30 Apr 2015 08:34:20 -0400 Received: from ns.iliad.fr ([212.27.33.1]:51352 "EHLO ns.iliad.fr" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751398AbbD3MeJ (ORCPT ); Thu, 30 Apr 2015 08:34:09 -0400 X-Greylist: delayed 410 seconds by postgrey-1.27 at vger.kernel.org; Thu, 30 Apr 2015 08:34:09 EDT Message-ID: <55421FA5.2070906@freebox.fr> Date: Thu, 30 Apr 2015 14:27:17 +0200 From: Nicolas Schichan User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Daniel Borkmann , Kees Cook , Andy Lutomirski , Will Drewry , linux-kernel@vger.kernel.org, ast@plumgrid.com, davem@davemloft.net Subject: Re: [PATCH 2/4] seccomp: rework seccomp_prepare_filter(). References: <1430314657-2552-1-git-send-email-nschichan@freebox.fr> <1430314657-2552-3-git-send-email-nschichan@freebox.fr> <5541110D.4020507@iogearbox.net> In-Reply-To: <5541110D.4020507@iogearbox.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1899 Lines: 51 On 04/29/2015 07:12 PM, Daniel Borkmann wrote: > On 04/29/2015 03:37 PM, Nicolas Schichan wrote: >> - Try to use the classic BPF JIT via bpf_jit_compile(). >> >> - Use bpf_migrate_filter() from NET filter code instead of the double >> bpf_convert_filter() followed by bpf_prog_select_runtime() if >> classic bpf_jit_compile() did not succeed in producing native code. >> >> Signed-off-by: Nicolas Schichan > > [ I had to look that one up manually, would be good if you keep > people in Cc, also netdev for BPF in general. ] Hello Daniel, Sorry about that, I used git-send-email with a --to-cmd set to: "./scripts/get_maintainer.pl -m --norolestats --git-max-maintainer 2" and your email didn't show up for this particular patch. Additionally the other emails in the serie that were addressed to you were addressed to an old disabled email address of yours. It didn't show up either without "--git-max-maintainer 2". I'll take more care about the receiver list for the v2 of this serie. > I see, you need that to make it available to the old bpf_jit_compile() > for probing on classic JITs. Actually, I really would prefer, if instead > of duplicating that code, you could export bpf_prepare_filter() and > pass seccomp_check_filter() as an argument to bpf_prepare_filter(). Just to be sure you want me to pass a pointer to seccomp_check_filter to bpf_prepare_filter so that it can run it between bpf_check_classic() and bpf_jit_compile ? > Otherwise, in case bpf_prepare_filter() changes, people will easily > forget to update seccomp related code, really. Fair point. Thanks, -- Nicolas Schichan Freebox SAS -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/