SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #29618 from bonktree/fchmodat2

Browse Source 
seccomp: get `fchmodat2(2)` covered by `RestrictSUIDSGID=`
This commit is contained in:
Luca Boccassi
2023-10-20 10:49:46 +01:00
committed by GitHub
parent 612a91c11a 8b45281daa
commit ed51ccf4b8
25 changed files with 164 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/basic/missing_syscall_def.h
+68
View File
@@ -246,6 +246,74 @@ assert_cc(__NR_copy_file_range == systemd_NR_copy_file_range);
# endif
#endif
#ifndef __IGNORE_fchmodat2
# if defined(__aarch64__)
# define systemd_NR_fchmodat2 452
# elif defined(__alpha__)
# define systemd_NR_fchmodat2 562
# elif defined(__arc__) || defined(__tilegx__)
# define systemd_NR_fchmodat2 452
# elif defined(__arm__)
# define systemd_NR_fchmodat2 452
# elif defined(__i386__)
# define systemd_NR_fchmodat2 452
# elif defined(__ia64__)
# define systemd_NR_fchmodat2 1476
# elif defined(__loongarch_lp64)
# define systemd_NR_fchmodat2 452
# elif defined(__m68k__)
# define systemd_NR_fchmodat2 452
# elif defined(_MIPS_SIM)
# if _MIPS_SIM == _MIPS_SIM_ABI32
# define systemd_NR_fchmodat2 4452
# elif _MIPS_SIM == _MIPS_SIM_NABI32
# define systemd_NR_fchmodat2 6452
# elif _MIPS_SIM == _MIPS_SIM_ABI64
# define systemd_NR_fchmodat2 5452
# else
# error "Unknown MIPS ABI"
# endif
# elif defined(__hppa__)
# define systemd_NR_fchmodat2 452
# elif defined(__powerpc__)
# define systemd_NR_fchmodat2 452
# elif defined(__riscv)
# if __riscv_xlen == 32
# define systemd_NR_fchmodat2 452
# elif __riscv_xlen == 64
# define systemd_NR_fchmodat2 452
# else
# error "Unknown RISC-V ABI"
# endif
# elif defined(__s390__)
# define systemd_NR_fchmodat2 452
# elif defined(__sparc__)
# define systemd_NR_fchmodat2 452
# elif defined(__x86_64__)
# if defined(__ILP32__)
# define systemd_NR_fchmodat2 (452 | /* __X32_SYSCALL_BIT */ 0x40000000)
# else
# define systemd_NR_fchmodat2 452
# endif
# elif !defined(missing_arch_template)
# warning "fchmodat2() syscall number is unknown for your architecture"
# endif
/* may be an (invalid) negative number due to libseccomp, see PR 13319 */
# if defined __NR_fchmodat2 && __NR_fchmodat2 >= 0
# if defined systemd_NR_fchmodat2
assert_cc(__NR_fchmodat2 == systemd_NR_fchmodat2);
# endif
# else
# if defined __NR_fchmodat2
# undef __NR_fchmodat2
# endif
# if defined systemd_NR_fchmodat2 && systemd_NR_fchmodat2 >= 0
# define __NR_fchmodat2 systemd_NR_fchmodat2
# endif
# endif
#endif
#ifndef __IGNORE_getrandom
# if defined(__aarch64__)
# define systemd_NR_getrandom 278
src/basic/missing_syscalls.py
+1
View File
@@ -9,6 +9,7 @@ SYSCALLS = [
'bpf',
'close_range',
'copy_file_range',
'fchmodat2',
'getrandom',
'memfd_create',
'mount_setattr',
src/basic/syscall-list.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark
fchdir
fchmod
fchmodat
fchmodat2
fchown
fchown32
fchownat
@@ -202,6 +203,7 @@ lsetxattr
lstat
lstat64
madvise
map_shadow_stack
mbind
membarrier
memfd_create
src/basic/syscalls-alpha.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 495
fchdir 13
fchmod 124
fchmodat 461
fchmodat2 562
fchown 123
fchown32
fchownat 453
@@ -202,6 +203,7 @@ lsetxattr 383
lstat 68
lstat64 426
madvise 75
map_shadow_stack
mbind 429
membarrier 517
memfd_create 512
src/basic/syscalls-arc.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 263
fchdir 50
fchmod 52
fchmodat 53
fchmodat2 452
fchown 55
fchown32
fchownat 54
@@ -202,6 +203,7 @@ lsetxattr 6
lstat
lstat64
madvise 233
map_shadow_stack
mbind 235
membarrier 283
memfd_create 279
src/basic/syscalls-arm.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 368
fchdir 133
fchmod 94
fchmodat 333
fchmodat2 452
fchown 95
fchown32 207
fchownat 325
@@ -202,6 +203,7 @@ lsetxattr 227
lstat 107
lstat64 196
madvise 220
map_shadow_stack
mbind 319
membarrier 389
memfd_create 385
src/basic/syscalls-arm64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 263
fchdir 50
fchmod 52
fchmodat 53
fchmodat2 452
fchown 55
fchown32
fchownat 54
@@ -202,6 +203,7 @@ lsetxattr 6
lstat
lstat64
madvise 233
map_shadow_stack
mbind 235
membarrier 283
memfd_create 279
src/basic/syscalls-i386.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 339
fchdir 133
fchmod 94
fchmodat 306
fchmodat2 452
fchown 95
fchown32 207
fchownat 298
@@ -202,6 +203,7 @@ lsetxattr 227
lstat 107
lstat64 196
madvise 219
map_shadow_stack
mbind 274
membarrier 375
memfd_create 356
src/basic/syscalls-ia64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 1324
fchdir 1035
fchmod 1099
fchmodat 1292
fchmodat2 1476
fchown 1100
fchown32
fchownat 1284
@@ -202,6 +203,7 @@ lsetxattr 1218
lstat 1211
lstat64
madvise 1209
map_shadow_stack
mbind 1259
membarrier 1344
memfd_create 1340
src/basic/syscalls-loongarch64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 263
fchdir 50
fchmod 52
fchmodat 53
fchmodat2 452
fchown 55
fchown32
fchownat 54
@@ -202,6 +203,7 @@ lsetxattr 6
lstat
lstat64
madvise 233
map_shadow_stack
mbind 235
membarrier 283
memfd_create 279
src/basic/syscalls-m68k.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 338
fchdir 133
fchmod 94
fchmodat 299
fchmodat2 452
fchown 95
fchown32 207
fchownat 291
@@ -202,6 +203,7 @@ lsetxattr 224
lstat 107
lstat64 196
madvise 238
map_shadow_stack
mbind 268
membarrier 374
memfd_create 353
src/basic/syscalls-mips64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 5296
fchdir 5079
fchmod 5089
fchmodat 5258
fchmodat2 5452
fchown 5091
fchown32
fchownat 5250
@@ -202,6 +203,7 @@ lsetxattr 5181
lstat 5006
lstat64
madvise 5027
map_shadow_stack
mbind 5227
membarrier 5318
memfd_create 5314
src/basic/syscalls-mips64n32.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 6301
fchdir 6079
fchmod 6089
fchmodat 6262
fchmodat2 6452
fchown 6091
fchown32
fchownat 6254
@@ -202,6 +203,7 @@ lsetxattr 6181
lstat 6006
lstat64
madvise 6027
map_shadow_stack
mbind 6231
membarrier 6322
memfd_create 6318
src/basic/syscalls-mipso32.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 4337
fchdir 4133
fchmod 4094
fchmodat 4299
fchmodat2 4452
fchown 4095
fchown32
fchownat 4291
@@ -202,6 +203,7 @@ lsetxattr 4225
lstat 4107
lstat64 4214
madvise 4218
map_shadow_stack
mbind 4268
membarrier 4358
memfd_create 4354
src/basic/syscalls-parisc.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 323
fchdir 133
fchmod 94
fchmodat 286
fchmodat2 452
fchown 95
fchown32
fchownat 278
@@ -202,6 +203,7 @@ lsetxattr 239
lstat 84
lstat64 198
madvise 119
map_shadow_stack
mbind 260
membarrier 343
memfd_create 340
src/basic/syscalls-powerpc.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 324
fchdir 133
fchmod 94
fchmodat 297
fchmodat2 452
fchown 95
fchown32
fchownat 289
@@ -202,6 +203,7 @@ lsetxattr 210
lstat 107
lstat64 196
madvise 205
map_shadow_stack
mbind 259
membarrier 365
memfd_create 360
src/basic/syscalls-powerpc64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 324
fchdir 133
fchmod 94
fchmodat 297
fchmodat2 452
fchown 95
fchown32
fchownat 289
@@ -202,6 +203,7 @@ lsetxattr 210
lstat 107
lstat64
madvise 205
map_shadow_stack
mbind 259
membarrier 365
memfd_create 360
src/basic/syscalls-riscv32.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 263
fchdir 50
fchmod 52
fchmodat 53
fchmodat2 452
fchown 55
fchown32
fchownat 54
@@ -202,6 +203,7 @@ lsetxattr 6
lstat
lstat64
madvise 233
map_shadow_stack
mbind 235
membarrier 283
memfd_create 279
src/basic/syscalls-riscv64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 263
fchdir 50
fchmod 52
fchmodat 53
fchmodat2 452
fchown 55
fchown32
fchownat 54
@@ -202,6 +203,7 @@ lsetxattr 6
lstat
lstat64
madvise 233
map_shadow_stack
mbind 235
membarrier 283
memfd_create 279
src/basic/syscalls-s390.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 333
fchdir 133
fchmod 94
fchmodat 299
fchmodat2 452
fchown 95
fchown32 207
fchownat 291
@@ -202,6 +203,7 @@ lsetxattr 225
lstat 107
lstat64 196
madvise 219
map_shadow_stack
mbind 268
membarrier 356
memfd_create 350
src/basic/syscalls-s390x.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 333
fchdir 133
fchmod 94
fchmodat 299
fchmodat2 452
fchown 207
fchown32
fchownat 291
@@ -202,6 +203,7 @@ lsetxattr 225
lstat 107
lstat64
madvise 219
map_shadow_stack
mbind 268
membarrier 356
memfd_create 350
src/basic/syscalls-sparc.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 330
fchdir 176
fchmod 124
fchmodat 295
fchmodat2 452
fchown 123
fchown32 32
fchownat 287
@@ -202,6 +203,7 @@ lsetxattr 170
lstat 40
lstat64 132
madvise 75
map_shadow_stack
mbind 303
membarrier 351
memfd_create 348
src/basic/syscalls-x86_64.txt
+2
View File
@@ -79,6 +79,7 @@ fanotify_mark 301
fchdir 81
fchmod 91
fchmodat 268
fchmodat2 452
fchown 93
fchown32
fchownat 260
@@ -202,6 +203,7 @@ lsetxattr 189
lstat 6
lstat64
madvise 28
map_shadow_stack 453
mbind 237
membarrier 324
memfd_create 319