From: Mickaël Salaün mic@linux.microsoft.com
[ Upstream commit 2c07343abd8932200a45ff7b10950e71081e9e77 ]
seccomp_bpf.c uses unshare(CLONE_NEWPID), which requires CONFIG_PID_NS to be set.
Cc: Kees Cook keescook@chromium.org Cc: Shuah Khan shuah@kernel.org Fixes: 6a21cc50f0c7 ("seccomp: add a return code to trap to userspace") Signed-off-by: Mickaël Salaün mic@linux.microsoft.com Acked-by: Tycho Andersen tycho@tycho.pizza Signed-off-by: Kees Cook keescook@chromium.org Link: https://lore.kernel.org/r/20201202162643.249276-1-mic@digikod.net Signed-off-by: Sasha Levin sashal@kernel.org --- tools/testing/selftests/seccomp/config | 1 + 1 file changed, 1 insertion(+)
diff --git a/tools/testing/selftests/seccomp/config b/tools/testing/selftests/seccomp/config index db1e11b08c8a4..764af1f853f95 100644 --- a/tools/testing/selftests/seccomp/config +++ b/tools/testing/selftests/seccomp/config @@ -1,2 +1,3 @@ +CONFIG_PID_NS=y CONFIG_SECCOMP=y CONFIG_SECCOMP_FILTER=y