Unnamed repository; edit this file 'description' to name the repository. http://euandre.org/git/grovel/atom?h=main 2023-02-09T17:33:35Z 2023-02-09T17:33:35Z Rich Felker dalias@aerifal.cx 2023-02-09T16:52:44Z urn:sha1:269d193820342dc109f39909d78fb30f4c978f76 we wrongly defined a dummy SA_RESTORER flag on these archs, despite the kernel interface not actually having such a feature. on archs which lack SA_RESTORER, the kernel sigaction structure also lacks the restorer function pointer member, which means the signal mask appears at a different offset. the kernel was thereby interpreting the bits of the code address as part of the signal set to be masked while handling the signal. this patch removes the erroneous SA_RESTORER definitions from archs which do not have it, makes access to the member conditional on whether SA_RESTORER is defined for the arch, and removes the now-unused asm for the affected archs. because there are reportedly versions of qemu-user which also use the wrong ABI here, the old ksigaction struct size is preserved with an unused member at the end. this is harmless and mitigates the risk of such a bug turning into a buffer overflow onto the sigaction function's stack. 2022-03-08T22:21:14Z Szabolcs Nagy nsz@port70.net 2021-07-04T16:34:15Z urn:sha1:ee05b11b67d59a6c5bb4b9d661bcc20bbd0bbe7a see linux commit a49f4f81cb48925e8d7cbd9e59068f516e984144 arch: Wire up Landlock syscalls linuxcommit 17ae69aba89dbfa2139b7f8024b757ab3cc42f59 Merge tag 'landlock_v34' of ... jmorris/linux-security Landlock provides for unprivileged application sandboxing. The goal of Landlock is to enable to restrict ambient rights (e.g. global filesystem access) for a set of processes. Landlock is inspired by seccomp-bpf but instead of filtering syscalls and their raw arguments, a Landlock rule can restrict the use of kernel objects like file hierarchies, according to the kernel semantic. 2022-03-08T22:19:51Z Szabolcs Nagy nsz@port70.net 2021-05-25T20:53:18Z urn:sha1:f7d3db5bfc4c3b2315dd8c3137f0f332e1c6896a new syscall to change the properties of a mount or a mount tree using file descriptors which the new mount api is based on, see linux commit 2a1867219c7b27f928e2545782b86daaf9ad50bd fs: add mount_setattr() 2022-03-08T22:19:36Z Szabolcs Nagy nsz@port70.net 2021-03-07T19:21:34Z urn:sha1:b21f3ded780cc8fd8e510c99aeaf4a453d8c8a22 see linux commit b0a0c2615f6f199a656ed8549d7dce625d77aa77 epoll: wire up syscall epoll_pwait2 linux commit 58169a52ebc9a733aeb5bea857bc5daa71a301bb epoll: add syscall epoll_pwait2 epoll_wait with struct timespec timeout instead of int. no time32 variant. 2021-02-15T14:15:54Z Szabolcs Nagy nsz@port70.net 2020-12-19T20:12:31Z urn:sha1:fd285f9dec226ca9e5377888ee24e3f8f5ada49f mainly added to linux to allow a central process management service in android to give MADV_COLD|PAGEOUT hints for other processes, see linux commit ecb8ac8b1f146915aa6b96449b66dd48984caacc mm/madvise: introduce process_madvise() syscall: an external memory hinting API 2020-11-29T05:54:14Z Szabolcs Nagy nsz@port70.net 2020-10-24T10:15:43Z urn:sha1:3ba370fe8d9f450d351d710066fa20afad8ce3df see linux commit 9b4feb630e8e9801603f3cab3a36369e3c1cf88d arch: wire-up close_range() linux commit 278a5fbaed89dacd04e9d052f4594ffd0e0585de open: add close_range() 2020-09-09T21:21:03Z Szabolcs Nagy nsz@port70.net 2020-07-28T21:17:13Z urn:sha1:9b7ed9702ce8925a5a947ad3bdbba126fe955aaf the linux faccessat syscall lacks a flag argument that is necessary to implement the posix api, see linux commit c8ffd8bcdd28296a198f237cc595148a8d4adfbe vfs: add faccessat2 syscall 2020-09-09T21:19:55Z Szabolcs Nagy nsz@port70.net 2020-03-31T18:32:51Z urn:sha1:d990090384c6a468bb86962baf8bae7b6fd1d2bf also added clone3 on sh and m68k, on sh it's still missing (not yet wired up), but reserved so safe to add. see linux commit fddb5d430ad9fa91b49b1d34d0202ffe2fa0e179 open: introduce openat2(2) syscall linux commit 9a2cef09c801de54feecd912303ace5c27237f12 arch: wire up pidfd_getfd syscall linux commit 8649c322f75c96e7ced2fec201e123b2b073bf09 pid: Implement pidfd_getfd syscall linux commit e8bb2a2a1d51511e6b3f7e08125d52ec73c11139 m68k: Wire up clone3() syscall 2020-05-21T20:25:12Z Rich Felker dalias@aerifal.cx 2020-05-21T17:06:21Z urn:sha1:cabc36969bce739e86ecac250d286b0bda6aa88e signal 7 is SIGEMT on Linux mips* ABI according to the man pages and kernel. it's not clear where the wrong name came from but it dates back to original mips commit. 2020-02-05T14:57:41Z Rich Felker dalias@aerifal.cx 2020-02-05T14:55:02Z urn:sha1:b4712ba445a5cb589d1ac37785c29164cd3cf1f9 this extends commit 5a105f19b5aae79dd302899e634b6b18b3dcd0d6, removing timer[fd]_settime and timer[fd]_gettime. the timerfd ones are likely to have been used in software that started using them before it could rely on libc exposing functions.