/*
 * Naive system call dropper built on seccomp_filter.
 *
 * Copyright (c) 2012 The Chromium OS Authors <chromium-os-dev@chromium.org>
 * Author: Will Drewry <wad@chromium.org>
 *
 * The code may be used by anyone for any purpose,
 * and can serve as a starting point for developing
 * applications using prctl(PR_SET_SECCOMP, 2, ...).
 *
 * When run, returns the specified errno for the specified
 * system call number against the given architecture.
 *
 */

#include <errno.h>
#include <linux/audit.h>
#include <linux/filter.h>
#include <linux/seccomp.h>
#include <linux/unistd.h>
#include <stdio.h>
#include <stddef.h>
#include <stdlib.h>
#include <sys/prctl.h>
#include <unistd.h>

static int install_filter(int nr, int arch, int error)
{
	struct sock_filter filter[] = {
		BPF_STMT(BPF_LD+BPF_W+BPF_ABS,
			 (offsetof(struct seccomp_data, arch))),
		BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, arch, 0, 3),
		BPF_STMT(BPF_LD+BPF_W+BPF_ABS,
			 (offsetof(struct seccomp_data, nr))),
		BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, nr, 0, 1),
		BPF_STMT(BPF_RET+BPF_K,
			 SECCOMP_RET_ERRNO|(error & SECCOMP_RET_DATA)),
		BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_ALLOW),
	};
	struct sock_fprog prog = {
		.len = (unsigned short)(sizeof(filter)/sizeof(filter[0])),
		.filter = filter,
	};
	if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) {
		perror("prctl(NO_NEW_PRIVS)");
		return 1;
	}
	if (prctl(PR_SET_SECCOMP, 2, &prog)) {
		perror("prctl(PR_SET_SECCOMP)");
		return 1;
	}
	return 0;
}

int main(int argc, char **argv)
{
	if (argc < 5) {
		fprintf(stderr, "Usage:\n"
			"dropper <syscall_nr> <arch> <errno> <prog> [<args>]\n"
			"Hint:	AUDIT_ARCH_I386: 0x%X\n"
			"	AUDIT_ARCH_X86_64: 0x%X\n"
			"\n", AUDIT_ARCH_I386, AUDIT_ARCH_X86_64);
		return 1;
	}
	if (install_filter(strtol(argv[1], NULL, 0), strtol(argv[2], NULL, 0),
			   strtol(argv[3], NULL, 0)))
		return 1;
	execv(argv[4], &argv[4]);
	printf("Failed to execv\n");
	return 255;
}
<a href='/cgit.cgi/linux/net-next.git/tree/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>tree</a><a class='active' href='/cgit.cgi/linux/net-next.git/commit/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>commit</a><a href='/cgit.cgi/linux/net-next.git/diff/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>diff</a></td><td class='form'><form class='right' method='get' action='/cgit.cgi/linux/net-next.git/log/tools/lib/lockdep/Build'>
<input type='hidden' name='h' value='nds-private-remove'/><input type='hidden' name='id' value='2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/cgit.cgi/linux/net-next.git/commit/?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>root</a>/<a href='/cgit.cgi/linux/net-next.git/commit/tools?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>tools</a>/<a href='/cgit.cgi/linux/net-next.git/commit/tools/lib?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>lib</a>/<a href='/cgit.cgi/linux/net-next.git/commit/tools/lib/lockdep?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>lockdep</a>/<a href='/cgit.cgi/linux/net-next.git/commit/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>Build</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='h' value='nds-private-remove'/><input type='hidden' name='id' value='2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Linus Torvalds &lt;torvalds@linux-foundation.org&gt;</td><td class='right'>2017-01-15 12:38:53 -0800</td></tr>
<tr><th>committer</th><td>Linus Torvalds &lt;torvalds@linux-foundation.org&gt;</td><td class='right'>2017-01-15 12:38:53 -0800</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>2d5a7101a140adcf7a5d8677649847fbb2dd5a2f</a> (<a href='/cgit.cgi/linux/net-next.git/patch/tools/lib/lockdep/Build?id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/tree/?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>02e3532964dd4c42aa6ea2187fee67e6dfee36dd</a> /<a href='/cgit.cgi/linux/net-next.git/tree/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>tools/lib/lockdep/Build</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=7f138b9706f5f3528d598aefd35337d54a8c1afb'>7f138b9706f5f3528d598aefd35337d54a8c1afb</a> (<a href='/cgit.cgi/linux/net-next.git/diff/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f&amp;id2=7f138b9706f5f3528d598aefd35337d54a8c1afb'>diff</a>)</td></tr><tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=c7334ce814f7e5d8fc1f9b3126cda0640c2f81b3'>c7334ce814f7e5d8fc1f9b3126cda0640c2f81b3</a> (<a href='/cgit.cgi/linux/net-next.git/diff/tools/lib/lockdep/Build?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f&amp;id2=c7334ce814f7e5d8fc1f9b3126cda0640c2f81b3'>diff</a>)</td></tr></table>
<div class='commit-subject'>Merge tag 'driver-core-4.10-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core</div><div class='commit-msg'>Pull driver core fix from Greg KH:
 "Here is a single patch being reverted to remove a feature that was
  added in 4.10-rc1 that isn't quite ready for release.

  It will be redone as a debugfs file instead of a sysfs file in the
  future"

* tag 'driver-core-4.10-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:
  Revert "driver core: Add deferred_probe attribute to devices in sysfs"
</div><div class='diffstat-header'><a href='/cgit.cgi/linux/net-next.git/diff/?h=nds-private-remove&amp;id=2d5a7101a140adcf7a5d8677649847fbb2dd5a2f'>Diffstat</a> (limited to 'tools/lib/lockdep/Build')</div><table summary='diffstat' class='diffstat'>