seccomp: Enable speculation flaw mitigations
authorKees Cook <keescook@chromium.org>
Tue, 1 May 2018 22:07:31 +0000 (15:07 -0700)
committerThomas Gleixner <tglx@linutronix.de>
Thu, 3 May 2018 11:55:52 +0000 (13:55 +0200)
commit5c3070890d06ff82eecb808d02d2ca39169533ef
tree61123edee3ab9386a4314c3ce8267007471c0874
parentfae1fa0fc6cca8beee3ab8ed71d54f9a78fa3f64
seccomp: Enable speculation flaw mitigations

When speculation flaw mitigations are opt-in (via prctl), using seccomp
will automatically opt-in to these protections, since using seccomp
indicates at least some level of sandboxing is desired.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
kernel/seccomp.c