From: Mickaël Salaün mic@linux.microsoft.com
seccomp_bpf.c uses unshare(CLONE_NEWPID), which requires CONFIG_PID_NS to be set.
Cc: Kees Cook keescook@chromium.org Cc: Shuah Khan shuah@kernel.org Fixes: 6a21cc50f0c7 ("seccomp: add a return code to trap to userspace") Signed-off-by: Mickaël Salaün mic@linux.microsoft.com Acked-by: Tycho Andersen tycho@tycho.pizza ---
Previous version: https://lore.kernel.org/lkml/20201030121819.764395-1-mic@digikod.net/
Changes since v1: * Add Acked-by: Tycho Andersen tycho@tycho.pizza * Synchronize From and Signed-off-by emails. --- tools/testing/selftests/seccomp/config | 1 + 1 file changed, 1 insertion(+)
diff --git a/tools/testing/selftests/seccomp/config b/tools/testing/selftests/seccomp/config index 64c19d8eba79..ad431a5178fb 100644 --- a/tools/testing/selftests/seccomp/config +++ b/tools/testing/selftests/seccomp/config @@ -1,3 +1,4 @@ +CONFIG_PID_NS=y CONFIG_SECCOMP=y CONFIG_SECCOMP_FILTER=y CONFIG_USER_NS=y
base-commit: b65054597872ce3aefbc6a666385eabdf9e288da