seccomp: Allow arch code to provide seccomp_data
authorAndy Lutomirski <luto@amacapital.net>
Tue, 22 Jul 2014 01:49:16 +0000 (18:49 -0700)
committerKees Cook <keescook@chromium.org>
Wed, 3 Sep 2014 21:58:17 +0000 (14:58 -0700)
commitd39bd00deabe57420f2a3669eb71b0e0c4997184
treebc32386d90df23c8d657b6b6a0051a0a59af11fe
parent13aa72f0fd0a9f98a41cefb662487269e2f1ad65
seccomp: Allow arch code to provide seccomp_data

populate_seccomp_data is expensive: it works by inspecting
task_pt_regs and various other bits to piece together all the
information, and it's does so in multiple partially redundant steps.

Arch-specific code in the syscall entry path can do much better.

Admittedly this adds a bit of additional room for error, but the
speedup should be worth it.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Kees Cook <keescook@chromium.org>
include/linux/seccomp.h
kernel/seccomp.c