From 8dc75f225774468eed52fdfba3248034fab6b505 Mon Sep 17 00:00:00 2001 From: rpm-build Date: Thu, 31 Aug 2023 14:23:27 +0800 Subject: [PATCH 1/4] add sw_64 support not upstream new files --- src/arch-sw_64.c | 95 ++++++++++++++++++++++++++++++++++++++++++++++++ src/arch-sw_64.h | 28 ++++++++++++++ 2 files changed, 123 insertions(+) create mode 100644 src/arch-sw_64.c create mode 100644 src/arch-sw_64.h diff --git a/src/arch-sw_64.c b/src/arch-sw_64.c new file mode 100644 index 0000000..74ef4d7 --- /dev/null +++ b/src/arch-sw_64.c @@ -0,0 +1,95 @@ +/** + * Enhanced Seccomp SW_64 Specific Code + * + * Copyright (c) 2013 Red Hat + * Author: Paul Moore + */ + +/* + * This library is free software; you can redistribute it and/or modify it + * under the terms of version 2.1 of the GNU Lesser General Public License as + * published by the Free Software Foundation. + * + * This library is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License + * for more details. + * + * You should have received a copy of the GNU Lesser General Public License + * along with this library; if not, see . + */ + +#include +#include +#include + +#include "arch.h" +#include "arch-sw_64.h" +#include "syscalls.h" + +#define __SCMP_NR_OABI_SYSCALL_BASE 0x900000 +#define __SCMP_SW_64_NR_BASE 0x0f0000 + +/* NOTE: we currently only support the ARM EABI, more info at the URL below: + * -> http://wiki.embeddedarm.com/wiki/EABI_vs_OABI */ +#if 1 +#define __SCMP_NR_BASE 0 +#else +#define __SCMP_NR_BASE __SCMP_NR_OABI_SYSCALL_BASE +#endif + +/** + * Resolve a syscall name to a number + * @param arch the architecture definition + * @param name the syscall name + * + * Resolve the given syscall name to the syscall number using the syscall table. + * Returns the syscall number on success, including negative pseudo syscall + * numbers; returns __NR_SCMP_ERROR on failure. + * + */ +int sw_64_syscall_resolve_name_munge(const struct arch_def *arch, + const char *name) +{ + int sys; + + /* NOTE: we don't want to modify the pseudo-syscall numbers */ + sys = arch->syscall_resolve_name_raw(name); + if (sys == __NR_SCMP_ERROR || sys < 0) + return sys; + + return (sys | __SCMP_NR_BASE); +} + +/** + * Resolve a syscall number to a name + * @param arch the architecture definition + * @param num the syscall number + * + * Resolve the given syscall number to the syscall name using the syscall table. + * Returns a pointer to the syscall name string on success, including pseudo + * syscall names; returns NULL on failure. + * + */ +const char *sw_64_syscall_resolve_num_munge(const struct arch_def *arch, int num) +{ + /* NOTE: we don't want to modify the pseudo-syscall numbers */ + if (num >= 0) + num &= ~__SCMP_NR_BASE; + return arch->syscall_resolve_num_raw(num); +} + +ARCH_DEF(sw_64) + +const struct arch_def arch_def_sw_64 = { + .token = SCMP_ARCH_SW_64, + .token_bpf = AUDIT_ARCH_SW_64, + .size = ARCH_SIZE_32, + .endian = ARCH_ENDIAN_LITTLE, + .syscall_resolve_name = sw_64_syscall_resolve_name_munge, + .syscall_resolve_name_raw = sw_64_syscall_resolve_name, + .syscall_resolve_num = sw_64_syscall_resolve_num_munge, + .syscall_resolve_num_raw = sw_64_syscall_resolve_num, + .syscall_rewrite = NULL, + .rule_add = NULL, +}; diff --git a/src/arch-sw_64.h b/src/arch-sw_64.h new file mode 100644 index 0000000..5329ab3 --- /dev/null +++ b/src/arch-sw_64.h @@ -0,0 +1,28 @@ +/** + * Enhanced Seccomp ARM Specific Code + * + * Copyright (c) 2013 Red Hat + * Author: Paul Moore + */ + +/* + * This library is free software; you can redistribute it and/or modify it + * under the terms of version 2.1 of the GNU Lesser General Public License as + * published by the Free Software Foundation. + * + * This library is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License + * for more details. + * + * You should have received a copy of the GNU Lesser General Public License + * along with this library; if not, see . + */ + +#ifndef _ARCH_SW_64_H +#define _ARCH_SW_64_H + +#include "arch.h" +ARCH_DECL(sw_64) + +#endif -- 2.27.0