Received: by 2002:a05:6a10:1a4d:0:0:0:0 with SMTP id nk13csp3180894pxb; Thu, 10 Feb 2022 14:26:34 -0800 (PST) X-Google-Smtp-Source: ABdhPJycxY0jiRksI1E56XVSiLvG4gAN0ONWCBMZTf0jsJhcLj2FZd78QdEc0FTC/OWywxw1ZuOW X-Received: by 2002:a17:907:9720:: with SMTP id jg32mr4885277ejc.175.1644531994223; Thu, 10 Feb 2022 14:26:34 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1644531994; cv=none; d=google.com; s=arc-20160816; b=JpxryIW1voEuUwzQvlAFOn3jd5V9X/VeToPzK5xDXZb4i/2PQ6Vln1J5POpG1eb+i2 Sqeoe71FRGyHCNim2U1qgcUsPRr7lALHbsgp5tUWzUgossSinKTtvedUYeQA3HnablUG rLyGuSJVL6qXSYI+YBjx0PKIpLCoUkEAXb//xYN/wEvEPnQlXD4li8cFLyqHJUzbA55m r4HSKjFm5hijEiDVKxCA/ZzNhK3J1NWwJR7tDQVvlcgBDk1/VOnCI6DKO0whGKogs6z2 FIuzhPKv7SV7iE9HAJP/KvExJ5/OYmS9ohRzCd8N91+tv+jICUKyrPTXOhRyoh5AZbXY ewPg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=56GxMSeC38DM7FjFScYhpGTuLwbWHwsMqi8kcAas7E4=; b=Gg07fNxqtdRhq0/emGRGJFjOsof0RRo3cCDNQi9jlZoc8Vlu6myF3KI0KHWLFQ/QIQ bQK0fEkvnOBjJAU+xZONeESr66/8K05Pm+SrpGbWwNLjBqVvAmR4kfCbncOj25GfggIW GEMrmWkSdkh++yyYrjMwQHrVMA41O3IiE8KgD8pLrC5tOS+f6IrUdtsbY1XwBubd+Gzu xlxFIQbuDUpPk4wfGM0IMY2kAAEf7+bsmeAQZnO3i/ETcatjSH1twONkaVaic3jL5vsK qSDl++5ZMyCx5a5keE+BuGXhJOwRGumLhTsDvNdV2UzuTpiMaPI87WU8K1pdkz0KgYNd c02A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=FDKenY6u; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id h6si10004325edq.212.2022.02.10.14.26.09; Thu, 10 Feb 2022 14:26:34 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=FDKenY6u; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1344554AbiBJVQc (ORCPT + 99 others); Thu, 10 Feb 2022 16:16:32 -0500 Received: from mxb-00190b01.gslb.pphosted.com ([23.128.96.19]:42208 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S236222AbiBJVQa (ORCPT ); Thu, 10 Feb 2022 16:16:30 -0500 Received: from mail-pf1-x435.google.com (mail-pf1-x435.google.com [IPv6:2607:f8b0:4864:20::435]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id E508F26C5 for ; Thu, 10 Feb 2022 13:16:29 -0800 (PST) Received: by mail-pf1-x435.google.com with SMTP id y8so9810988pfa.11 for ; Thu, 10 Feb 2022 13:16:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=56GxMSeC38DM7FjFScYhpGTuLwbWHwsMqi8kcAas7E4=; b=FDKenY6uG8aNafmFX+Zg+YrB5T4Ep6A1O3Fde4Ag43f5AMMXe9HR0HtDP4Ih0HvH+3 SY41Qh0xwpNOR/NKw3xSVKjSRjB+SuAm+0uZpPu/J95DLbAkevEwN9+41pCKemI61p5a Rp1jHJIJqVsRIOYArqyB/pwspLyKPK1IeTWXI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=56GxMSeC38DM7FjFScYhpGTuLwbWHwsMqi8kcAas7E4=; b=aBm+JvAeOjGm1fslyWNQ3zZwNLBJvRy6TREvzyGG8EPq2DnPSSpOHft8ca6qirTntp ryC4ieJgEtiPkQqqR2ThSZYWzXHlm+AUJjndy+OzCKS8fyL96sPu6k+DdLghfXrKC1mw rxWQt1oqyvsYJbT5cbDCgOZs9FAkiwUK2h3hHZlIHxsf8sXyzvYj3kssBjFxiRywgOAl Ap8gs02yc7UXp2UJFs29AI4BLoA8BbxR/qpRKkPioNrXeOpu25GfwtCGeqNFtSy+iIvL VthB+xAkPuUwSCsjcZlkCmckAiDICrAZ5SkTjpeLYyOH1IYyDWZQH23tu2SAvkR9TW3s qyuA== X-Gm-Message-State: AOAM5317yZT9+2DD82tsHPoioqKOVV+OLckmkSoqXdbkb9wu8yemWK7j 7bDCQfLttofs+A4LoYfFYNo5Lg== X-Received: by 2002:a63:da0b:: with SMTP id c11mr7643183pgh.436.1644527789466; Thu, 10 Feb 2022 13:16:29 -0800 (PST) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id r11sm23537151pff.81.2022.02.10.13.16.29 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Feb 2022 13:16:29 -0800 (PST) Date: Thu, 10 Feb 2022 13:16:28 -0800 From: Kees Cook To: Sherry Yang Cc: skhan@linuxfoundation.org, shuah@kernel.org, luto@amacapital.net, wad@chromium.org, christian@brauner.io, ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, kafai@fb.com, songliubraving@fb.com, yhs@fb.com, john.fastabend@gmail.com, kpsingh@kernel.org, linux-kselftest@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, bpf@vger.kernel.org Subject: Re: [PATCH v2] selftests/seccomp: Fix seccomp failure by adding missing headers Message-ID: <202202101316.E38FEAFBCA@keescook> References: <20220210203049.67249-1-sherry.yang@oracle.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20220210203049.67249-1-sherry.yang@oracle.com> X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Feb 10, 2022 at 12:30:49PM -0800, Sherry Yang wrote: > seccomp_bpf failed on tests 47 global.user_notification_filter_empty > and 48 global.user_notification_filter_empty_threaded when it's > tested on updated kernel but with old kernel headers. Because old > kernel headers don't have definition of macro __NR_clone3 which is > required for these two tests. Since under selftests/, we can install > headers once for all tests (the default INSTALL_HDR_PATH is > usr/include), fix it by adding usr/include to the list of directories > to be searched. Use "-isystem" to indicate it's a system directory as > the real kernel headers directories are. > > Signed-off-by: Sherry Yang Thanks! Reviewed-by: Kees Cook -- Kees Cook