mirror of
https://git.proxmox.com/git/mirror_ubuntu-kernels.git
synced 2025-11-20 01:40:23 +00:00
ff388fe5c4
Patch series "Introduce mseal", v10.
This patchset proposes a new mseal() syscall for the Linux kernel.
In a nutshell, mseal() protects the VMAs of a given virtual memory range
against modifications, such as changes to their permission bits.
Modern CPUs support memory permissions, such as the read/write (RW) and
no-execute (NX) bits. Linux has supported NX since the release of kernel
version 2.6.8 in August 2004 [1]. The memory permission feature improves
the security stance on memory corruption bugs, as an attacker cannot
simply write to arbitrary memory and point the code to it. The memory
must be marked with the X bit, or else an exception will occur.
Internally, the kernel maintains the memory permissions in a data
structure called VMA (vm_area_struct). mseal() additionally protects the
VMA itself against modifications of the selected seal type.
Memory sealing is useful to mitigate memory corruption issues where a
corrupted pointer is passed to a memory management system. For example,
such an attacker primitive can break control-flow integrity guarantees
since read-only memory that is supposed to be trusted can become writable
or .text pages can get remapped. Memory sealing can automatically be
applied by the runtime loader to seal .text and .rodata pages and
applications can additionally seal security critical data at runtime. A
similar feature already exists in the XNU kernel with the
VM_FLAGS_PERMANENT [3] flag and on OpenBSD with the mimmutable syscall
[4]. Also, Chrome wants to adopt this feature for their CFI work [2] and
this patchset has been designed to be compatible with the Chrome use case.
Two system calls are involved in sealing the map: mmap() and mseal().
The new mseal() is an syscall on 64 bit CPU, and with following signature:
int mseal(void addr, size_t len, unsigned long flags)
addr/len: memory range.
flags: reserved.
mseal() blocks following operations for the given memory range.
1> Unmapping, moving to another location, and shrinking the size,
via munmap() and mremap(), can leave an empty space, therefore can
be replaced with a VMA with a new set of attributes.
2> Moving or expanding a different VMA into the current location,
via mremap().
3> Modifying a VMA via mmap(MAP_FIXED).
4> Size expansion, via mremap(), does not appear to pose any specific
risks to sealed VMAs. It is included anyway because the use case is
unclear. In any case, users can rely on merging to expand a sealed VMA.
5> mprotect() and pkey_mprotect().
6> Some destructive madvice() behaviors (e.g. MADV_DONTNEED) for anonymous
memory, when users don't have write permission to the memory. Those
behaviors can alter region contents by discarding pages, effectively a
memset(0) for anonymous memory.
The idea that inspired this patch comes from Stephen Röttger’s work in
V8 CFI [5]. Chrome browser in ChromeOS will be the first user of this
API.
Indeed, the Chrome browser has very specific requirements for sealing,
which are distinct from those of most applications. For example, in the
case of libc, sealing is only applied to read-only (RO) or read-execute
(RX) memory segments (such as .text and .RELRO) to prevent them from
becoming writable, the lifetime of those mappings are tied to the lifetime
of the process.
Chrome wants to seal two large address space reservations that are managed
by different allocators. The memory is mapped RW- and RWX respectively
but write access to it is restricted using pkeys (or in the future ARM
permission overlay extensions). The lifetime of those mappings are not
tied to the lifetime of the process, therefore, while the memory is
sealed, the allocators still need to free or discard the unused memory.
For example, with madvise(DONTNEED).
However, always allowing madvise(DONTNEED) on this range poses a security
risk. For example if a jump instruction crosses a page boundary and the
second page gets discarded, it will overwrite the target bytes with zeros
and change the control flow. Checking write-permission before the discard
operation allows us to control when the operation is valid. In this case,
the madvise will only succeed if the executing thread has PKEY write
permissions and PKRU changes are protected in software by control-flow
integrity.
Although the initial version of this patch series is targeting the Chrome
browser as its first user, it became evident during upstream discussions
that we would also want to ensure that the patch set eventually is a
complete solution for memory sealing and compatible with other use cases.
The specific scenario currently in mind is glibc's use case of loading and
sealing ELF executables. To this end, Stephen is working on a change to
glibc to add sealing support to the dynamic linker, which will seal all
non-writable segments at startup. Once this work is completed, all
applications will be able to automatically benefit from these new
protections.
In closing, I would like to formally acknowledge the valuable
contributions received during the RFC process, which were instrumental in
shaping this patch:
Jann Horn: raising awareness and providing valuable insights on the
destructive madvise operations.
Liam R. Howlett: perf optimization.
Linus Torvalds: assisting in defining system call signature and scope.
Theo de Raadt: sharing the experiences and insight gained from
implementing mimmutable() in OpenBSD.
MM perf benchmarks
==================
This patch adds a loop in the mprotect/munmap/madvise(DONTNEED) to
check the VMAs’ sealing flag, so that no partial update can be made,
when any segment within the given memory range is sealed.
To measure the performance impact of this loop, two tests are developed.
[8]
The first is measuring the time taken for a particular system call,
by using clock_gettime(CLOCK_MONOTONIC). The second is using
PERF_COUNT_HW_REF_CPU_CYCLES (exclude user space). Both tests have
similar results.
The tests have roughly below sequence:
for (i = 0; i < 1000, i++)
create 1000 mappings (1 page per VMA)
start the sampling
for (j = 0; j < 1000, j++)
mprotect one mapping
stop and save the sample
delete 1000 mappings
calculates all samples.
Below tests are performed on Intel(R) Pentium(R) Gold 7505 @ 2.00GHz,
4G memory, Chromebook.
Based on the latest upstream code:
The first test (measuring time)
syscall__ vmas t t_mseal delta_ns per_vma %
munmap__ 1 909 944 35 35 104%
munmap__ 2 1398 1502 104 52 107%
munmap__ 4 2444 2594 149 37 106%
munmap__ 8 4029 4323 293 37 107%
munmap__ 16 6647 6935 288 18 104%
munmap__ 32 11811 12398 587 18 105%
mprotect 1 439 465 26 26 106%
mprotect 2 1659 1745 86 43 105%
mprotect 4 3747 3889 142 36 104%
mprotect 8 6755 6969 215 27 103%
mprotect 16 13748 14144 396 25 103%
mprotect 32 27827 28969 1142 36 104%
madvise_ 1 240 262 22 22 109%
madvise_ 2 366 442 76 38 121%
madvise_ 4 623 751 128 32 121%
madvise_ 8 1110 1324 215 27 119%
madvise_ 16 2127 2451 324 20 115%
madvise_ 32 4109 4642 534 17 113%
The second test (measuring cpu cycle)
syscall__ vmas cpu cmseal delta_cpu per_vma %
munmap__ 1 1790 1890 100 100 106%
munmap__ 2 2819 3033 214 107 108%
munmap__ 4 4959 5271 312 78 106%
munmap__ 8 8262 8745 483 60 106%
munmap__ 16 13099 14116 1017 64 108%
munmap__ 32 23221 24785 1565 49 107%
mprotect 1 906 967 62 62 107%
mprotect 2 3019 3203 184 92 106%
mprotect 4 6149 6569 420 105 107%
mprotect 8 9978 10524 545 68 105%
mprotect 16 20448 21427 979 61 105%
mprotect 32 40972 42935 1963 61 105%
madvise_ 1 434 497 63 63 115%
madvise_ 2 752 899 147 74 120%
madvise_ 4 1313 1513 200 50 115%
madvise_ 8 2271 2627 356 44 116%
madvise_ 16 4312 4883 571 36 113%
madvise_ 32 8376 9319 943 29 111%
Based on the result, for 6.8 kernel, sealing check adds
20-40 nano seconds, or around 50-100 CPU cycles, per VMA.
In addition, I applied the sealing to 5.10 kernel:
The first test (measuring time)
syscall__ vmas t tmseal delta_ns per_vma %
munmap__ 1 357 390 33 33 109%
munmap__ 2 442 463 21 11 105%
munmap__ 4 614 634 20 5 103%
munmap__ 8 1017 1137 120 15 112%
munmap__ 16 1889 2153 263 16 114%
munmap__ 32 4109 4088 -21 -1 99%
mprotect 1 235 227 -7 -7 97%
mprotect 2 495 464 -30 -15 94%
mprotect 4 741 764 24 6 103%
mprotect 8 1434 1437 2 0 100%
mprotect 16 2958 2991 33 2 101%
mprotect 32 6431 6608 177 6 103%
madvise_ 1 191 208 16 16 109%
madvise_ 2 300 324 24 12 108%
madvise_ 4 450 473 23 6 105%
madvise_ 8 753 806 53 7 107%
madvise_ 16 1467 1592 125 8 108%
madvise_ 32 2795 3405 610 19 122%
The second test (measuring cpu cycle)
syscall__ nbr_vma cpu cmseal delta_cpu per_vma %
munmap__ 1 684 715 31 31 105%
munmap__ 2 861 898 38 19 104%
munmap__ 4 1183 1235 51 13 104%
munmap__ 8 1999 2045 46 6 102%
munmap__ 16 3839 3816 -23 -1 99%
munmap__ 32 7672 7887 216 7 103%
mprotect 1 397 443 46 46 112%
mprotect 2 738 788 50 25 107%
mprotect 4 1221 1256 35 9 103%
mprotect 8 2356 2429 72 9 103%
mprotect 16 4961 4935 -26 -2 99%
mprotect 32 9882 10172 291 9 103%
madvise_ 1 351 380 29 29 108%
madvise_ 2 565 615 49 25 109%
madvise_ 4 872 933 61 15 107%
madvise_ 8 1508 1640 132 16 109%
madvise_ 16 3078 3323 245 15 108%
madvise_ 32 5893 6704 811 25 114%
For 5.10 kernel, sealing check adds 0-15 ns in time, or 10-30
CPU cycles, there is even decrease in some cases.
It might be interesting to compare 5.10 and 6.8 kernel
The first test (measuring time)
syscall__ vmas t_5_10 t_6_8 delta_ns per_vma %
munmap__ 1 357 909 552 552 254%
munmap__ 2 442 1398 956 478 316%
munmap__ 4 614 2444 1830 458 398%
munmap__ 8 1017 4029 3012 377 396%
munmap__ 16 1889 6647 4758 297 352%
munmap__ 32 4109 11811 7702 241 287%
mprotect 1 235 439 204 204 187%
mprotect 2 495 1659 1164 582 335%
mprotect 4 741 3747 3006 752 506%
mprotect 8 1434 6755 5320 665 471%
mprotect 16 2958 13748 10790 674 465%
mprotect 32 6431 27827 21397 669 433%
madvise_ 1 191 240 49 49 125%
madvise_ 2 300 366 67 33 122%
madvise_ 4 450 623 173 43 138%
madvise_ 8 753 1110 357 45 147%
madvise_ 16 1467 2127 660 41 145%
madvise_ 32 2795 4109 1314 41 147%
The second test (measuring cpu cycle)
syscall__ vmas cpu_5_10 c_6_8 delta_cpu per_vma %
munmap__ 1 684 1790 1106 1106 262%
munmap__ 2 861 2819 1958 979 327%
munmap__ 4 1183 4959 3776 944 419%
munmap__ 8 1999 8262 6263 783 413%
munmap__ 16 3839 13099 9260 579 341%
munmap__ 32 7672 23221 15549 486 303%
mprotect 1 397 906 509 509 228%
mprotect 2 738 3019 2281 1140 409%
mprotect 4 1221 6149 4929 1232 504%
mprotect 8 2356 9978 7622 953 423%
mprotect 16 4961 20448 15487 968 412%
mprotect 32 9882 40972 31091 972 415%
madvise_ 1 351 434 82 82 123%
madvise_ 2 565 752 186 93 133%
madvise_ 4 872 1313 442 110 151%
madvise_ 8 1508 2271 763 95 151%
madvise_ 16 3078 4312 1234 77 140%
madvise_ 32 5893 8376 2483 78 142%
From 5.10 to 6.8
munmap: added 250-550 ns in time, or 500-1100 in cpu cycle, per vma.
mprotect: added 200-750 ns in time, or 500-1200 in cpu cycle, per vma.
madvise: added 33-50 ns in time, or 70-110 in cpu cycle, per vma.
In comparison to mseal, which adds 20-40 ns or 50-100 CPU cycles, the
increase from 5.10 to 6.8 is significantly larger, approximately ten times
greater for munmap and mprotect.
When I discuss the mm performance with Brian Makin, an engineer who worked
on performance, it was brought to my attention that such performance
benchmarks, which measuring millions of mm syscall in a tight loop, may
not accurately reflect real-world scenarios, such as that of a database
service. Also this is tested using a single HW and ChromeOS, the data
from another HW or distribution might be different. It might be best to
take this data with a grain of salt.
This patch (of 5):
Wire up mseal syscall for all architectures.
Link: https://lkml.kernel.org/r/20240415163527.626541-1-jeffxu@chromium.org
Link: https://lkml.kernel.org/r/20240415163527.626541-2-jeffxu@chromium.org
Signed-off-by: Jeff Xu <jeffxu@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Liam R. Howlett <Liam.Howlett@oracle.com>
Cc: Dave Hansen <dave.hansen@intel.com>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Guenter Roeck <groeck@chromium.org>
Cc: Jann Horn <jannh@google.com> [Bug #2]
Cc: Jeff Xu <jeffxu@google.com>
Cc: Jonathan Corbet <corbet@lwn.net>
Cc: Jorge Lucangeli Obes <jorgelo@chromium.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Matthew Wilcox (Oracle) <willy@infradead.org>
Cc: Muhammad Usama Anjum <usama.anjum@collabora.com>
Cc: Pedro Falcato <pedro.falcato@gmail.com>
Cc: Stephen Röttger <sroettger@google.com>
Cc: Suren Baghdasaryan <surenb@google.com>
Cc: Amer Al Shanawany <amer.shanawany@gmail.com>
Cc: Javier Carrasco <javier.carrasco.cruz@gmail.com>
Cc: Shuah Khan <shuah@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
436 lines
16 KiB
Plaintext
436 lines
16 KiB
Plaintext
# SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note
|
|
#
|
|
# system call numbers and entry vectors for xtensa
|
|
#
|
|
# The format is:
|
|
# <number> <abi> <name> <entry point>
|
|
#
|
|
# The <abi> is always "common" for this file
|
|
#
|
|
0 common spill sys_ni_syscall
|
|
1 common xtensa sys_ni_syscall
|
|
2 common available4 sys_ni_syscall
|
|
3 common available5 sys_ni_syscall
|
|
4 common available6 sys_ni_syscall
|
|
5 common available7 sys_ni_syscall
|
|
6 common available8 sys_ni_syscall
|
|
7 common available9 sys_ni_syscall
|
|
# File Operations
|
|
8 common open sys_open
|
|
9 common close sys_close
|
|
10 common dup sys_dup
|
|
11 common dup2 sys_dup2
|
|
12 common read sys_read
|
|
13 common write sys_write
|
|
14 common select sys_select
|
|
15 common lseek sys_lseek
|
|
16 common poll sys_poll
|
|
17 common _llseek sys_llseek
|
|
18 common epoll_wait sys_epoll_wait
|
|
19 common epoll_ctl sys_epoll_ctl
|
|
20 common epoll_create sys_epoll_create
|
|
21 common creat sys_creat
|
|
22 common truncate sys_truncate
|
|
23 common ftruncate sys_ftruncate
|
|
24 common readv sys_readv
|
|
25 common writev sys_writev
|
|
26 common fsync sys_fsync
|
|
27 common fdatasync sys_fdatasync
|
|
28 common truncate64 sys_truncate64
|
|
29 common ftruncate64 sys_ftruncate64
|
|
30 common pread64 sys_pread64
|
|
31 common pwrite64 sys_pwrite64
|
|
32 common link sys_link
|
|
33 common rename sys_rename
|
|
34 common symlink sys_symlink
|
|
35 common readlink sys_readlink
|
|
36 common mknod sys_mknod
|
|
37 common pipe sys_pipe
|
|
38 common unlink sys_unlink
|
|
39 common rmdir sys_rmdir
|
|
40 common mkdir sys_mkdir
|
|
41 common chdir sys_chdir
|
|
42 common fchdir sys_fchdir
|
|
43 common getcwd sys_getcwd
|
|
44 common chmod sys_chmod
|
|
45 common chown sys_chown
|
|
46 common stat sys_newstat
|
|
47 common stat64 sys_stat64
|
|
48 common lchown sys_lchown
|
|
49 common lstat sys_newlstat
|
|
50 common lstat64 sys_lstat64
|
|
51 common available51 sys_ni_syscall
|
|
52 common fchmod sys_fchmod
|
|
53 common fchown sys_fchown
|
|
54 common fstat sys_newfstat
|
|
55 common fstat64 sys_fstat64
|
|
56 common flock sys_flock
|
|
57 common access sys_access
|
|
58 common umask sys_umask
|
|
59 common getdents sys_getdents
|
|
60 common getdents64 sys_getdents64
|
|
61 common fcntl64 sys_fcntl64
|
|
62 common fallocate sys_fallocate
|
|
63 common fadvise64_64 xtensa_fadvise64_64
|
|
64 common utime sys_utime32
|
|
65 common utimes sys_utimes_time32
|
|
66 common ioctl sys_ioctl
|
|
67 common fcntl sys_fcntl
|
|
68 common setxattr sys_setxattr
|
|
69 common getxattr sys_getxattr
|
|
70 common listxattr sys_listxattr
|
|
71 common removexattr sys_removexattr
|
|
72 common lsetxattr sys_lsetxattr
|
|
73 common lgetxattr sys_lgetxattr
|
|
74 common llistxattr sys_llistxattr
|
|
75 common lremovexattr sys_lremovexattr
|
|
76 common fsetxattr sys_fsetxattr
|
|
77 common fgetxattr sys_fgetxattr
|
|
78 common flistxattr sys_flistxattr
|
|
79 common fremovexattr sys_fremovexattr
|
|
# File Map / Shared Memory Operations
|
|
80 common mmap2 sys_mmap_pgoff
|
|
81 common munmap sys_munmap
|
|
82 common mprotect sys_mprotect
|
|
83 common brk sys_brk
|
|
84 common mlock sys_mlock
|
|
85 common munlock sys_munlock
|
|
86 common mlockall sys_mlockall
|
|
87 common munlockall sys_munlockall
|
|
88 common mremap sys_mremap
|
|
89 common msync sys_msync
|
|
90 common mincore sys_mincore
|
|
91 common madvise sys_madvise
|
|
92 common shmget sys_shmget
|
|
93 common shmat xtensa_shmat
|
|
94 common shmctl sys_old_shmctl
|
|
95 common shmdt sys_shmdt
|
|
# Socket Operations
|
|
96 common socket sys_socket
|
|
97 common setsockopt sys_setsockopt
|
|
98 common getsockopt sys_getsockopt
|
|
99 common shutdown sys_shutdown
|
|
100 common bind sys_bind
|
|
101 common connect sys_connect
|
|
102 common listen sys_listen
|
|
103 common accept sys_accept
|
|
104 common getsockname sys_getsockname
|
|
105 common getpeername sys_getpeername
|
|
106 common sendmsg sys_sendmsg
|
|
107 common recvmsg sys_recvmsg
|
|
108 common send sys_send
|
|
109 common recv sys_recv
|
|
110 common sendto sys_sendto
|
|
111 common recvfrom sys_recvfrom
|
|
112 common socketpair sys_socketpair
|
|
113 common sendfile sys_sendfile
|
|
114 common sendfile64 sys_sendfile64
|
|
115 common sendmmsg sys_sendmmsg
|
|
# Process Operations
|
|
116 common clone sys_clone
|
|
117 common execve sys_execve
|
|
118 common exit sys_exit
|
|
119 common exit_group sys_exit_group
|
|
120 common getpid sys_getpid
|
|
121 common wait4 sys_wait4
|
|
122 common waitid sys_waitid
|
|
123 common kill sys_kill
|
|
124 common tkill sys_tkill
|
|
125 common tgkill sys_tgkill
|
|
126 common set_tid_address sys_set_tid_address
|
|
127 common gettid sys_gettid
|
|
128 common setsid sys_setsid
|
|
129 common getsid sys_getsid
|
|
130 common prctl sys_prctl
|
|
131 common personality sys_personality
|
|
132 common getpriority sys_getpriority
|
|
133 common setpriority sys_setpriority
|
|
134 common setitimer sys_setitimer
|
|
135 common getitimer sys_getitimer
|
|
136 common setuid sys_setuid
|
|
137 common getuid sys_getuid
|
|
138 common setgid sys_setgid
|
|
139 common getgid sys_getgid
|
|
140 common geteuid sys_geteuid
|
|
141 common getegid sys_getegid
|
|
142 common setreuid sys_setreuid
|
|
143 common setregid sys_setregid
|
|
144 common setresuid sys_setresuid
|
|
145 common getresuid sys_getresuid
|
|
146 common setresgid sys_setresgid
|
|
147 common getresgid sys_getresgid
|
|
148 common setpgid sys_setpgid
|
|
149 common getpgid sys_getpgid
|
|
150 common getppid sys_getppid
|
|
151 common getpgrp sys_getpgrp
|
|
# 152 was set_thread_area
|
|
152 common reserved152 sys_ni_syscall
|
|
# 153 was get_thread_area
|
|
153 common reserved153 sys_ni_syscall
|
|
154 common times sys_times
|
|
155 common acct sys_acct
|
|
156 common sched_setaffinity sys_sched_setaffinity
|
|
157 common sched_getaffinity sys_sched_getaffinity
|
|
158 common capget sys_capget
|
|
159 common capset sys_capset
|
|
160 common ptrace sys_ptrace
|
|
161 common semtimedop sys_semtimedop_time32
|
|
162 common semget sys_semget
|
|
163 common semop sys_semop
|
|
164 common semctl sys_old_semctl
|
|
165 common available165 sys_ni_syscall
|
|
166 common msgget sys_msgget
|
|
167 common msgsnd sys_msgsnd
|
|
168 common msgrcv sys_msgrcv
|
|
169 common msgctl sys_old_msgctl
|
|
170 common available170 sys_ni_syscall
|
|
# File System
|
|
171 common umount2 sys_umount
|
|
172 common mount sys_mount
|
|
173 common swapon sys_swapon
|
|
174 common chroot sys_chroot
|
|
175 common pivot_root sys_pivot_root
|
|
176 common umount sys_oldumount
|
|
177 common swapoff sys_swapoff
|
|
178 common sync sys_sync
|
|
179 common syncfs sys_syncfs
|
|
180 common setfsuid sys_setfsuid
|
|
181 common setfsgid sys_setfsgid
|
|
182 common sysfs sys_sysfs
|
|
183 common ustat sys_ustat
|
|
184 common statfs sys_statfs
|
|
185 common fstatfs sys_fstatfs
|
|
186 common statfs64 sys_statfs64
|
|
187 common fstatfs64 sys_fstatfs64
|
|
# System
|
|
188 common setrlimit sys_setrlimit
|
|
189 common getrlimit sys_getrlimit
|
|
190 common getrusage sys_getrusage
|
|
191 common futex sys_futex_time32
|
|
192 common gettimeofday sys_gettimeofday
|
|
193 common settimeofday sys_settimeofday
|
|
194 common adjtimex sys_adjtimex_time32
|
|
195 common nanosleep sys_nanosleep_time32
|
|
196 common getgroups sys_getgroups
|
|
197 common setgroups sys_setgroups
|
|
198 common sethostname sys_sethostname
|
|
199 common setdomainname sys_setdomainname
|
|
200 common syslog sys_syslog
|
|
201 common vhangup sys_vhangup
|
|
202 common uselib sys_uselib
|
|
203 common reboot sys_reboot
|
|
204 common quotactl sys_quotactl
|
|
# 205 was old nfsservctl
|
|
205 common nfsservctl sys_ni_syscall
|
|
206 common _sysctl sys_ni_syscall
|
|
207 common bdflush sys_ni_syscall
|
|
208 common uname sys_newuname
|
|
209 common sysinfo sys_sysinfo
|
|
210 common init_module sys_init_module
|
|
211 common delete_module sys_delete_module
|
|
212 common sched_setparam sys_sched_setparam
|
|
213 common sched_getparam sys_sched_getparam
|
|
214 common sched_setscheduler sys_sched_setscheduler
|
|
215 common sched_getscheduler sys_sched_getscheduler
|
|
216 common sched_get_priority_max sys_sched_get_priority_max
|
|
217 common sched_get_priority_min sys_sched_get_priority_min
|
|
218 common sched_rr_get_interval sys_sched_rr_get_interval_time32
|
|
219 common sched_yield sys_sched_yield
|
|
222 common available222 sys_ni_syscall
|
|
# Signal Handling
|
|
223 common restart_syscall sys_restart_syscall
|
|
224 common sigaltstack sys_sigaltstack
|
|
225 common rt_sigreturn xtensa_rt_sigreturn
|
|
226 common rt_sigaction sys_rt_sigaction
|
|
227 common rt_sigprocmask sys_rt_sigprocmask
|
|
228 common rt_sigpending sys_rt_sigpending
|
|
229 common rt_sigtimedwait sys_rt_sigtimedwait_time32
|
|
230 common rt_sigqueueinfo sys_rt_sigqueueinfo
|
|
231 common rt_sigsuspend sys_rt_sigsuspend
|
|
# Message
|
|
232 common mq_open sys_mq_open
|
|
233 common mq_unlink sys_mq_unlink
|
|
234 common mq_timedsend sys_mq_timedsend_time32
|
|
235 common mq_timedreceive sys_mq_timedreceive_time32
|
|
236 common mq_notify sys_mq_notify
|
|
237 common mq_getsetattr sys_mq_getsetattr
|
|
238 common available238 sys_ni_syscall
|
|
239 common io_setup sys_io_setup
|
|
# IO
|
|
240 common io_destroy sys_io_destroy
|
|
241 common io_submit sys_io_submit
|
|
242 common io_getevents sys_io_getevents_time32
|
|
243 common io_cancel sys_io_cancel
|
|
244 common clock_settime sys_clock_settime32
|
|
245 common clock_gettime sys_clock_gettime32
|
|
246 common clock_getres sys_clock_getres_time32
|
|
247 common clock_nanosleep sys_clock_nanosleep_time32
|
|
# Timer
|
|
248 common timer_create sys_timer_create
|
|
249 common timer_delete sys_timer_delete
|
|
250 common timer_settime sys_timer_settime32
|
|
251 common timer_gettime sys_timer_gettime32
|
|
252 common timer_getoverrun sys_timer_getoverrun
|
|
# System
|
|
253 common reserved253 sys_ni_syscall
|
|
254 common lookup_dcookie sys_ni_syscall
|
|
255 common available255 sys_ni_syscall
|
|
256 common add_key sys_add_key
|
|
257 common request_key sys_request_key
|
|
258 common keyctl sys_keyctl
|
|
259 common available259 sys_ni_syscall
|
|
260 common readahead sys_readahead
|
|
261 common remap_file_pages sys_remap_file_pages
|
|
262 common migrate_pages sys_migrate_pages
|
|
263 common mbind sys_mbind
|
|
264 common get_mempolicy sys_get_mempolicy
|
|
265 common set_mempolicy sys_set_mempolicy
|
|
266 common unshare sys_unshare
|
|
267 common move_pages sys_move_pages
|
|
268 common splice sys_splice
|
|
269 common tee sys_tee
|
|
270 common vmsplice sys_vmsplice
|
|
271 common available271 sys_ni_syscall
|
|
272 common pselect6 sys_pselect6_time32
|
|
273 common ppoll sys_ppoll_time32
|
|
274 common epoll_pwait sys_epoll_pwait
|
|
275 common epoll_create1 sys_epoll_create1
|
|
276 common inotify_init sys_inotify_init
|
|
277 common inotify_add_watch sys_inotify_add_watch
|
|
278 common inotify_rm_watch sys_inotify_rm_watch
|
|
279 common inotify_init1 sys_inotify_init1
|
|
280 common getcpu sys_getcpu
|
|
281 common kexec_load sys_ni_syscall
|
|
282 common ioprio_set sys_ioprio_set
|
|
283 common ioprio_get sys_ioprio_get
|
|
284 common set_robust_list sys_set_robust_list
|
|
285 common get_robust_list sys_get_robust_list
|
|
286 common available286 sys_ni_syscall
|
|
287 common available287 sys_ni_syscall
|
|
# Relative File Operations
|
|
288 common openat sys_openat
|
|
289 common mkdirat sys_mkdirat
|
|
290 common mknodat sys_mknodat
|
|
291 common unlinkat sys_unlinkat
|
|
292 common renameat sys_renameat
|
|
293 common linkat sys_linkat
|
|
294 common symlinkat sys_symlinkat
|
|
295 common readlinkat sys_readlinkat
|
|
296 common utimensat sys_utimensat_time32
|
|
297 common fchownat sys_fchownat
|
|
298 common futimesat sys_futimesat_time32
|
|
299 common fstatat64 sys_fstatat64
|
|
300 common fchmodat sys_fchmodat
|
|
301 common faccessat sys_faccessat
|
|
302 common available302 sys_ni_syscall
|
|
303 common available303 sys_ni_syscall
|
|
304 common signalfd sys_signalfd
|
|
# 305 was timerfd
|
|
306 common eventfd sys_eventfd
|
|
307 common recvmmsg sys_recvmmsg_time32
|
|
308 common setns sys_setns
|
|
309 common signalfd4 sys_signalfd4
|
|
310 common dup3 sys_dup3
|
|
311 common pipe2 sys_pipe2
|
|
312 common timerfd_create sys_timerfd_create
|
|
313 common timerfd_settime sys_timerfd_settime32
|
|
314 common timerfd_gettime sys_timerfd_gettime32
|
|
315 common available315 sys_ni_syscall
|
|
316 common eventfd2 sys_eventfd2
|
|
317 common preadv sys_preadv
|
|
318 common pwritev sys_pwritev
|
|
319 common available319 sys_ni_syscall
|
|
320 common fanotify_init sys_fanotify_init
|
|
321 common fanotify_mark sys_fanotify_mark
|
|
322 common process_vm_readv sys_process_vm_readv
|
|
323 common process_vm_writev sys_process_vm_writev
|
|
324 common name_to_handle_at sys_name_to_handle_at
|
|
325 common open_by_handle_at sys_open_by_handle_at
|
|
326 common sync_file_range2 sys_sync_file_range2
|
|
327 common perf_event_open sys_perf_event_open
|
|
328 common rt_tgsigqueueinfo sys_rt_tgsigqueueinfo
|
|
329 common clock_adjtime sys_clock_adjtime32
|
|
330 common prlimit64 sys_prlimit64
|
|
331 common kcmp sys_kcmp
|
|
332 common finit_module sys_finit_module
|
|
333 common accept4 sys_accept4
|
|
334 common sched_setattr sys_sched_setattr
|
|
335 common sched_getattr sys_sched_getattr
|
|
336 common renameat2 sys_renameat2
|
|
337 common seccomp sys_seccomp
|
|
338 common getrandom sys_getrandom
|
|
339 common memfd_create sys_memfd_create
|
|
340 common bpf sys_bpf
|
|
341 common execveat sys_execveat
|
|
342 common userfaultfd sys_userfaultfd
|
|
343 common membarrier sys_membarrier
|
|
344 common mlock2 sys_mlock2
|
|
345 common copy_file_range sys_copy_file_range
|
|
346 common preadv2 sys_preadv2
|
|
347 common pwritev2 sys_pwritev2
|
|
348 common pkey_mprotect sys_pkey_mprotect
|
|
349 common pkey_alloc sys_pkey_alloc
|
|
350 common pkey_free sys_pkey_free
|
|
351 common statx sys_statx
|
|
352 common rseq sys_rseq
|
|
# 353 through 402 are unassigned to sync up with generic numbers
|
|
403 common clock_gettime64 sys_clock_gettime
|
|
404 common clock_settime64 sys_clock_settime
|
|
405 common clock_adjtime64 sys_clock_adjtime
|
|
406 common clock_getres_time64 sys_clock_getres
|
|
407 common clock_nanosleep_time64 sys_clock_nanosleep
|
|
408 common timer_gettime64 sys_timer_gettime
|
|
409 common timer_settime64 sys_timer_settime
|
|
410 common timerfd_gettime64 sys_timerfd_gettime
|
|
411 common timerfd_settime64 sys_timerfd_settime
|
|
412 common utimensat_time64 sys_utimensat
|
|
413 common pselect6_time64 sys_pselect6
|
|
414 common ppoll_time64 sys_ppoll
|
|
416 common io_pgetevents_time64 sys_io_pgetevents
|
|
417 common recvmmsg_time64 sys_recvmmsg
|
|
418 common mq_timedsend_time64 sys_mq_timedsend
|
|
419 common mq_timedreceive_time64 sys_mq_timedreceive
|
|
420 common semtimedop_time64 sys_semtimedop
|
|
421 common rt_sigtimedwait_time64 sys_rt_sigtimedwait
|
|
422 common futex_time64 sys_futex
|
|
423 common sched_rr_get_interval_time64 sys_sched_rr_get_interval
|
|
424 common pidfd_send_signal sys_pidfd_send_signal
|
|
425 common io_uring_setup sys_io_uring_setup
|
|
426 common io_uring_enter sys_io_uring_enter
|
|
427 common io_uring_register sys_io_uring_register
|
|
428 common open_tree sys_open_tree
|
|
429 common move_mount sys_move_mount
|
|
430 common fsopen sys_fsopen
|
|
431 common fsconfig sys_fsconfig
|
|
432 common fsmount sys_fsmount
|
|
433 common fspick sys_fspick
|
|
434 common pidfd_open sys_pidfd_open
|
|
435 common clone3 sys_clone3
|
|
436 common close_range sys_close_range
|
|
437 common openat2 sys_openat2
|
|
438 common pidfd_getfd sys_pidfd_getfd
|
|
439 common faccessat2 sys_faccessat2
|
|
440 common process_madvise sys_process_madvise
|
|
441 common epoll_pwait2 sys_epoll_pwait2
|
|
442 common mount_setattr sys_mount_setattr
|
|
443 common quotactl_fd sys_quotactl_fd
|
|
444 common landlock_create_ruleset sys_landlock_create_ruleset
|
|
445 common landlock_add_rule sys_landlock_add_rule
|
|
446 common landlock_restrict_self sys_landlock_restrict_self
|
|
# 447 reserved for memfd_secret
|
|
448 common process_mrelease sys_process_mrelease
|
|
449 common futex_waitv sys_futex_waitv
|
|
450 common set_mempolicy_home_node sys_set_mempolicy_home_node
|
|
451 common cachestat sys_cachestat
|
|
452 common fchmodat2 sys_fchmodat2
|
|
453 common map_shadow_stack sys_map_shadow_stack
|
|
454 common futex_wake sys_futex_wake
|
|
455 common futex_wait sys_futex_wait
|
|
456 common futex_requeue sys_futex_requeue
|
|
457 common statmount sys_statmount
|
|
458 common listmount sys_listmount
|
|
459 common lsm_get_self_attr sys_lsm_get_self_attr
|
|
460 common lsm_set_self_attr sys_lsm_set_self_attr
|
|
461 common lsm_list_modules sys_lsm_list_modules
|
|
462 common mseal sys_mseal
|