seccomp: Add a seccomp_data parameter secure_computing()

Currently, if arch code wants to supply seccomp_data directly to
seccomp (which is generally much faster than having seccomp do it
using the syscall_get_xyz() API), it has to use the two-phase
seccomp hooks. Add it to the easy hooks, too.

Cc: [email protected]
Signed-off-by: Andy Lutomirski <[email protected]>
Signed-off-by: Kees Cook <[email protected]>
This commit is contained in:
Andy Lutomirski 2016-05-27 12:57:02 -07:00 • committed by Kees Cook
commit 2f275de5d1
11 changed files with 15 additions and 15 deletions

View file

@ -554,9 +554,9 @@ void secure_computing_strict(int this_syscall)
BUG();
}
#else
int __secure_computing(void)
int __secure_computing(const struct seccomp_data *sd)
{
u32 phase1_result = seccomp_phase1(NULL);
u32 phase1_result = seccomp_phase1(sd);
if (likely(phase1_result == SECCOMP_PHASE1_OK))
return 0;