Attachment 3057 Details for Bug 2752 – Enable-specific-ioctl-call-for-EP11-crypto-card-s390

[patch] Enable-specific-ioctl-call-for-EP11-crypto-card-s390

0003-Enable-specific-ioctl-call-for-EP11-crypto-card-s390.patch (text/plain), 1.04 KB, created by Damien Miller on 2017-09-22 09:30:28 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Damien Miller

Created: 2017-09-22 09:30:28 AEST

Size: 1.04 KB

patch

obsolete

>From d66823dc485b0f4ba1866b481bf98e275eaf3ebf Mon Sep 17 00:00:00 2001
>From: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>
>Date: Tue, 9 May 2017 13:33:30 -0300
>Subject: [PATCH 3/3] Enable specific ioctl call for EP11 crypto card (s390)
>
>The EP11 crypto card needs to make an ioctl call, which receives an
>specific argument. This crypto card is for s390 only.
>
>Signed-off-by: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>
>---
> sandbox-seccomp-filter.c | 2 ++
> 1 file changed, 2 insertions(+)
>
>diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
>index e86aa2c..98062f1 100644
>--- a/sandbox-seccomp-filter.c
>+++ b/sandbox-seccomp-filter.c
>@@ -250,6 +250,8 @@ static const struct sock_filter preauth_insns[] = {
> 	SC_ALLOW_ARG(__NR_ioctl, 1, Z90STAT_STATUS_MASK),
> 	SC_ALLOW_ARG(__NR_ioctl, 1, ICARSAMODEXPO),
> 	SC_ALLOW_ARG(__NR_ioctl, 1, ICARSACRT),
>+	/* Allow ioctls for EP11 crypto card on s390 */
>+	SC_ALLOW_ARG(__NR_ioctl, 1, ZSENDEP11CPRB),
> #endif
> #if defined(__x86_64__) && defined(__ILP32__) && defined(__X32_SYSCALL_BIT)
> 	/*
>-- 
>1.9.1
>

Actions: View | Diff

Attachments on bug 2752: 3025 | 3055 | 3056 | 3057