Received: by 2002:a05:6a10:a0d1:0:0:0:0 with SMTP id j17csp4709834pxa; Mon, 10 Aug 2020 16:27:45 -0700 (PDT) X-Google-Smtp-Source: ABdhPJw1hiOSWOloSVUZPRraPgWxnx7V6X9qMwh5CpMIh6253Q6TTwxf1npcvm5Uz1XIb/v6/1hJ X-Received: by 2002:a17:906:2801:: with SMTP id r1mr23017622ejc.17.1597102065218; Mon, 10 Aug 2020 16:27:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1597102065; cv=none; d=google.com; s=arc-20160816; b=LDz7NbN/xQgJuemXjpTJivUPqrgRGXa4aXG1ZWtNDbxQRk8IvaUIAhBMVYfJAJ9MJK 0eg1v8IcwZE6jWsdJljTvythtUfqwJ1VQsZJCrYgNrGeJAY4X4r/nd/llr/abRY/jWLP eors1IEoMNnV27Wa/FYcaKuFy+Q8pI1wy/1vqJtXA/L6U357/ZC7rVv6/O0ReolGiHnK 68RkzoQFsmLe+bTfFkwC9MUfdYpZ/NBTWcMShsCU6xxShlV/j0y4jta8Yvs70niFWBDL U09R79Y+46S/dVyki7gft4nkFZ8RlSr214dEhnq3uoSTQhqYZDbuYDn19E4qarEyhRCN SWHw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from; bh=3qQdxJVFqzgaYJX4RLnJ3EMUzfhAPBEj8iPspZLXVlU=; b=0ZKq+1QFul2bf6blYJ0YSngF4fAj/SpNxoMAKtZxWCQMdaGh8nzP+XPTv6fuR3m16j Nf7IKpqvMl1YqYiJVcCV3Z3n6gfD/2U9biTIxLmo7/yCw2VFDaVAnowR/9FPlPFPlUDX 3MGbd0qLeVhmvVQ5f/DUsltzt5v/8FkeYVayrypwcVRu/c840Z6LAjz5dVmz36vyJD4a RE5p2fvF1QQVFkTYmExytO1mOzLmLSWER8ih8H9XVklN8wdQftcxirkQXIdYej1CZt7I ylkOgBncUwfMLMGXAM4EgpKPqZ2epjezOwMFb+rF8mH4wXT8HMMUGZQk+FbEhh+v/dTx CcCA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=collabora.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id s9si2367636edh.243.2020.08.10.16.27.19; Mon, 10 Aug 2020 16:27:45 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=collabora.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727810AbgHJX0q (ORCPT + 99 others); Mon, 10 Aug 2020 19:26:46 -0400 Received: from bhuna.collabora.co.uk ([46.235.227.227]:51352 "EHLO bhuna.collabora.co.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726634AbgHJX0q (ORCPT ); Mon, 10 Aug 2020 19:26:46 -0400 Received: from [127.0.0.1] (localhost [127.0.0.1]) (Authenticated sender: krisman) with ESMTPSA id 390F428DB7F From: Gabriel Krisman Bertazi To: luto@kernel.org, tglx@linutronix.de Cc: keescook@chromium.org, x86@kernel.org, linux-kernel@vger.kernel.org, linux-api@vger.kernel.org, willy@infradead.org, linux-kselftest@vger.kernel.org, shuah@kernel.org, Gabriel Krisman Bertazi , kernel@collabora.com Subject: [PATCH v5 0/9] Syscall User Dispatch Date: Mon, 10 Aug 2020 19:26:27 -0400 Message-Id: <20200810232636.1415588-1-krisman@collabora.com> X-Mailer: git-send-email 2.28.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This is v5 of Syscall User Dispatch. It has some big changes in comparison to v4. First of all, it allows the vdso trampoline code for architectures that support it. This is exposed through an arch hook. It also addresses the concern about what happens when a bad selector is provided, instead of SIGSEGV, we fail with SIGSYS, which is more debug-able. Another major change is that it is now based on top of Gleixner's common syscall entry work, and is supposed to only be used by that code. Therefore, the entry symbol is not exported outside of kernel/entry/ code. The biggest change in this version is the attempt to avoid using one of the final TIF flags on x86 32 bit, without increasing the size of that variable to 64 bit. My expectation is that, with this work, plus the removal of TIF_IA32, TIF_X32 and TIF_FORCE_TF, we might be able to avoid changing this field to 64 bits at all. Instead, this follows the suggestion by Andy to have a generic TIF flag for SECCOMP and this mechanism, and use another field to decide which one is enabled. The code for this is not complex, so it seems like a viable approach. Finally, this version adds some documentation to the feature. Kees, I dropped your reviewed-by on patch 5, given the amount of changes. Thanks, Previous submissions are archived at: RFC/v1: https://lkml.org/lkml/2020/7/8/96 v2: https://lkml.org/lkml/2020/7/9/17 v3: https://lkml.org/lkml/2020/7/12/4 v4: https://lwn.net/ml/linux-kernel/20200712044516.2347844-1-krisman@collabora.com/ Gabriel Krisman Bertazi (9): kernel: Support TIF_SYSCALL_INTERCEPT flag kernel: entry: Support TIF_SYSCAL_INTERCEPT on common entry code x86: vdso: Expose sigreturn address on vdso to the kernel signal: Expose SYS_USER_DISPATCH si_code type kernel: Implement selective syscall userspace redirection kernel: entry: Support Syscall User Dispatch for common syscall entry x86: Enable Syscall User Dispatch selftests: Add kselftest for syscall user dispatch doc: Document Syscall User Dispatch .../admin-guide/syscall-user-dispatch.rst | 87 ++++++ arch/Kconfig | 21 ++ arch/x86/Kconfig | 1 + arch/x86/entry/vdso/vdso2c.c | 2 + arch/x86/entry/vdso/vdso32/sigreturn.S | 2 + arch/x86/entry/vdso/vma.c | 15 + arch/x86/include/asm/elf.h | 1 + arch/x86/include/asm/thread_info.h | 4 +- arch/x86/include/asm/vdso.h | 2 + arch/x86/kernel/signal_compat.c | 2 +- fs/exec.c | 8 + include/linux/entry-common.h | 6 +- include/linux/sched.h | 8 +- include/linux/seccomp.h | 20 +- include/linux/syscall_intercept.h | 71 +++++ include/linux/syscall_user_dispatch.h | 29 ++ include/uapi/asm-generic/siginfo.h | 3 +- include/uapi/linux/prctl.h | 5 + kernel/entry/Makefile | 1 + kernel/entry/common.c | 32 +- kernel/entry/common.h | 15 + kernel/entry/syscall_user_dispatch.c | 101 ++++++ kernel/fork.c | 10 +- kernel/seccomp.c | 7 +- kernel/sys.c | 5 + tools/testing/selftests/Makefile | 1 + .../syscall_user_dispatch/.gitignore | 2 + .../selftests/syscall_user_dispatch/Makefile | 9 + .../selftests/syscall_user_dispatch/config | 1 + .../syscall_user_dispatch.c | 292 ++++++++++++++++++ 30 files changed, 744 insertions(+), 19 deletions(-) create mode 100644 Documentation/admin-guide/syscall-user-dispatch.rst create mode 100644 include/linux/syscall_intercept.h create mode 100644 include/linux/syscall_user_dispatch.h create mode 100644 kernel/entry/common.h create mode 100644 kernel/entry/syscall_user_dispatch.c create mode 100644 tools/testing/selftests/syscall_user_dispatch/.gitignore create mode 100644 tools/testing/selftests/syscall_user_dispatch/Makefile create mode 100644 tools/testing/selftests/syscall_user_dispatch/config create mode 100644 tools/testing/selftests/syscall_user_dispatch/syscall_user_dispatch.c -- 2.28.0