[PATCH 2/3] [RFC] seccomp: give BPF x32 bit when restoring x32 filter

H. Peter Anvin hpa at zytor.com
Fri Jul 11 16:44:52 UTC 2014


On 07/11/2014 09:36 AM, Paul Moore wrote:
> 
> Arguably audit is broken anyway by not correctly treating syscall numbers as 
> 32 bit integers like everyone else.
> 

That is really the root cause of the problem.  x86 is not the only
architecture with a sparse syscall numbering scheme (in fact the x32
method was based on the MIPS syscall numbering scheme.)

What syscall_get_nr() returns becomes a matter of definition at that point.

	-hpa




More information about the Linux-audit mailing list