To enable seccomp constant action bitmaps, we need to have a static mapping to the audit architecture and system call table size. Add these for arm64.
Signed-off-by: Kees Cook <[email protected]> --- arch/arm64/include/asm/seccomp.h | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/arch/arm64/include/asm/seccomp.h b/arch/arm64/include/asm/seccomp.h index c36387170936..40f325e7a404 100644 --- a/arch/arm64/include/asm/seccomp.h +++ b/arch/arm64/include/asm/seccomp.h @@ -19,4 +19,19 @@ #include <asm-generic/seccomp.h> +#ifdef CONFIG_ARM64 +# define SECCOMP_ARCH_NATIVE AUDIT_ARCH_AARCH64 +# define SECCOMP_ARCH_NATIVE_NR NR_syscalls +# define SECCOMP_ARCH_NATIVE_NAME "arm64" +# ifdef CONFIG_COMPAT +# define SECCOMP_ARCH_COMPAT AUDIT_ARCH_ARM +# define SECCOMP_ARCH_COMPAT_NR __NR_compat_syscalls +# define SECCOMP_ARCH_COMPAT_NAME "arm" +# endif +#else /* !CONFIG_ARM64 */ +# define SECCOMP_ARCH_NATIVE AUDIT_ARCH_ARM +# define SECCOMP_ARCH_NATIVE_NR NR_syscalls +# define SECCOMP_ARCH_NATIVE_NAME "arm" +#endif + #endif /* _ASM_SECCOMP_H */ -- 2.25.1
