seccomp_filter patches don't apply to 3.2

Bug #887780 reported by Tim Gardner
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Medium
John Johansen
Precise
Fix Released
Medium
John Johansen

Bug Description

Dropped these 4 patches during the rebase to 3.2-rc1:

UBUNTU: SAUCE: seccomp_filter: add HAVE_SECCOMP_FILTER and seccomp_execve
UBUNTU: SAUCE: seccomp_filter: Document what seccomp_filter is and how it works.
UBUNTU: SAUCE: seccomp_filter: add process state reporting
UBUNTU: SAUCE: seccomp_filter: new mode with configurable syscall

Tim Gardner (timg-tpi)
visibility: private → public
Revision history for this message
Brad Figg (brad-figg) wrote : Missing required logs.

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 887780

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Tim Gardner (timg-tpi)
Changed in linux (Ubuntu Precise):
assignee: nobody → Canonical Security Team (canonical-security)
Brad Figg (brad-figg)
Changed in linux (Ubuntu Precise):
status: New → Incomplete
Changed in linux (Ubuntu Precise):
assignee: Canonical Security Team (canonical-security) → John Johansen (jjohansen)
importance: Undecided → Medium
status: Incomplete → Triaged
tags: added: regression-release rls-p-tracking
Changed in linux (Ubuntu Precise):
milestone: none → ubuntu-12.04-beta-1
Revision history for this message
Kees Cook (kees) wrote :

My current branch for this is here:
https://github.com/kees/linux/commits/seccomp_filter

but it's against upstream, not precise.

Revision history for this message
Kees Cook (kees) wrote :

Oh, wait, I forgot about the work I already did. :P So, I did rebase it to precise already, but back in October, so it needs re-rebasing, and amending to add the right SAUCE headers:
https://github.com/kees/linux/commits/ubuntu-precise

Tim Gardner (timg-tpi)
Changed in linux (Ubuntu Precise):
milestone: ubuntu-12.04-beta-1 → precise-alpha-1
status: Triaged → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (3.4 KiB)

This bug was fixed in the package linux - 3.2.0-1.1

---------------
linux (3.2.0-1.1) precise; urgency=low

  [ Andy Whitcroft ]

  * armhf -- enable armhf and create the first flavours
  * SAUCE: ensure root is ready before running usermodehelpers in it
  * [Config] enforcer -- ensure CONFIG_FAT_FS is built-in on arm

  [ Leann Ogasawara ]

  * Temporarily ignore module check
  * [Config] Enable PCI_IOV on powerpc
  * [Config] Temporarily disable CONFIG_PASEMI_MAC on powerpc
  * rebase to v3.2-rc2
  * SAUCE: include <linux/export.h> for cpuidle34xx arm build
  * SAUCE: include <linux/kernel.h> for linux/mtd/map.h arm build
  * SAUCE: include <linux/printk.h> and <stdarg.h> for mmc_core arm build
  * SAUCE: select ARM_AMBA if OMAP3_EMU
  * [Config] updateconfigs after select ARM_AMBA
  * [Config] Temporarily disable CONFIG_KVM_BOOK3S_32 on powerpc
  * [Config] Enable CONFIG_EXT2_FS=m
  * [Config] Build in CONFIG_SATA_AHCI=y
  * Resolve linux-image-extra's install dependency

  [ Seth Forshee ]

  * [Config] Enable EVENT_POWER_TRACING_DEPRECATED=y for powertop
  * SAUCE: (drop after 3.2) Input: ALPS - move protocol information to
    Documentation
  * SAUCE: (drop after 3.2) Input: ALPS - add protocol version field in
    alps_model_info
  * SAUCE: (drop after 3.2) Input: ALPS - remove assumptions about packet
    size
  * SAUCE: (drop after 3.2) Input: ALPS - add support for protocol versions
    3 and 4
  * SAUCE: (drop after 3.2) Input: ALPS - add semi-MT support for v3
    protocol
  * SAUCE: (drop after 3.2) Input: ALPS - add documentation for protocol
    versions 3 and 4

  [ Stefan Bader ]

  * [Config] Built-in xen-netfront and xen-blkfront
  * Fix build of dm-raid45 and re-enable it

  [ Tim Gardner ]

  * [Config] CONFIG_USB_XHCI_HCD=y
    - LP: #886167
  * [Config] CONFIG_R6040=m
    - LP: #650899
  * SAUCE: Add a new entry (413c:8197) to Bluetooth USB device ID table
    - LP: #854399
  * [Config] Consolidated amd64 server flavour into generic
  * [Config] updateconfigs after rebase to 3.2-rc1
  * [Config] Disabled dm-raid4-5
  * [Config] Disabled ndiswrapper
  * [Config] Disable vt6656
  * [Config] exclude ppp-modules for virtual flavour
  * [Config] CONFIG_MEMSTICK_R592=m
    - LP: #238208

  [ Upstream Kernel Changes ]

  * CHROMIUM: seccomp_filter: new mode with configurable syscall filters
    - LP: #887780
  * CHROMIUM: seccomp_filter: add process state reporting
    - LP: #887780
  * CHROMIUM: seccomp_filter: Document what seccomp_filter is and how it
    works.
    - LP: #887780
  * CHROMIUM: x86: add HAVE_SECCOMP_FILTER and seccomp_execve
    - LP: #887780
  * CHROMIUM: arm: select HAVE_SECCOMP_FILTER
    - LP: #887780
  * CHROMIUM: seccomp_filters: move to btrees
  * CHROMIUM: enable CONFIG_BTREE
  * CHROMIUM: seccomp_filter: kill NR_syscall references
  * CHROMIUM: seccomp_filters: guard all ftrace wrapper code
  * CHROMIUM: seccomp_filters: clean up warnings; kref mistake
  * CHROMIUM: seccomp_filter: remove "skip" from copy and add drop helper
  * CHROMIUM: seccomp_filter: allow CAP_SYS_ADMIN management of execve
  * CHROMIUM: seccomp_filter: inheritance documentation
  * CHROMIUM: seccomp_filter: make inherited filt...

Read more...

Changed in linux (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.