arm64: Enable seccomp architecture tracking
authorKees Cook <keescook@chromium.org>
Tue, 27 Oct 2020 19:23:19 +0000 (12:23 -0700)
committerKees Cook <keescook@chromium.org>
Fri, 20 Nov 2020 19:16:34 +0000 (11:16 -0800)
To enable seccomp constant action bitmaps, we need to have a static
mapping to the audit architecture and system call table size. Add these
for arm64.

Signed-off-by: Kees Cook <keescook@chromium.org>
arch/arm64/include/asm/seccomp.h

index c363871..3025623 100644 (file)
 
 #include <asm-generic/seccomp.h>
 
+#define SECCOMP_ARCH_NATIVE            AUDIT_ARCH_AARCH64
+#define SECCOMP_ARCH_NATIVE_NR         NR_syscalls
+#define SECCOMP_ARCH_NATIVE_NAME       "aarch64"
+#ifdef CONFIG_COMPAT
+# define SECCOMP_ARCH_COMPAT           AUDIT_ARCH_ARM
+# define SECCOMP_ARCH_COMPAT_NR        __NR_compat_syscalls
+# define SECCOMP_ARCH_COMPAT_NAME      "arm"
+#endif
+
 #endif /* _ASM_SECCOMP_H */