dhavalkapil-oai
1bda886113
Enforce Linux seccomp restrictions for x32 syscalls ( #61206 )
...
## Why
The x32 ABI shares the x86-64 audit architecture, so the architecture check alone does not enforce syscall restrictions for x32 callers.
## What changed
Apply existing syscall denials and socket-family conditions to x32 syscall numbers on x86-64, including separate x32 numbers and legacy aliases supported before Linux 5.4.
## Testing
Add probes across all three network seccomp modes to verify that restricted native and x32 calls return `EPERM`, allowed calls preserve their behavior, and socket-family restrictions apply to both ABIs.
GitOrigin-RevId: fa38138d6b6c7b26dfafd6c931880ee1265a1b94
2026-11-12 23:53:14 +00:00
..
2026-11-12 17:31:24 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 22:41:50 +00:00
2026-11-05 16:08:23 +00:00
2026-11-10 11:17:06 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:08:59 +00:00
2026-11-10 01:31:19 +00:00
2026-11-12 18:30:45 +00:00
2026-11-10 11:17:06 +00:00
2026-11-07 10:41:36 +00:00
2026-11-04 00:19:12 +00:00
2026-11-07 10:41:36 +00:00
2026-11-05 22:03:29 +00:00
2026-11-11 23:36:19 +00:00
2026-11-12 21:03:47 +00:00
2026-11-05 04:25:19 +00:00
2026-11-05 05:09:32 +00:00
2026-11-05 05:09:32 +00:00
2026-11-12 16:38:13 +00:00
2026-11-12 16:38:13 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 19:43:12 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-10 03:02:25 +00:00
2026-11-07 05:59:44 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 22:43:14 +00:00
2026-11-12 21:02:43 +00:00
2026-11-12 23:51:52 +00:00
2026-11-03 23:49:01 +00:00
2026-11-03 04:08:59 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 14:47:48 +00:00
2026-11-05 04:25:19 +00:00
2026-11-12 23:51:52 +00:00
2026-11-05 00:55:46 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 22:41:50 +00:00
2026-11-11 19:16:19 +00:00
2026-11-06 00:37:27 +00:00
2026-11-10 08:52:35 +00:00
2026-11-10 21:58:49 +00:00
2026-11-12 21:40:00 +00:00
2026-11-12 00:27:01 +00:00
2026-11-10 03:02:25 +00:00
2026-11-12 01:57:33 +00:00
2026-11-12 04:32:34 +00:00
2026-11-12 23:53:14 +00:00
2026-11-12 01:57:33 +00:00
2026-11-12 14:22:20 +00:00
2026-11-12 22:41:50 +00:00
2026-11-02 20:34:35 +00:00
2026-11-12 19:43:12 +00:00
2026-11-06 04:24:04 +00:00
2026-11-09 16:37:22 +00:00
2026-11-10 16:58:06 +00:00
2026-11-10 04:43:24 +00:00
2026-11-12 23:08:59 +00:00
2026-11-12 19:43:12 +00:00
2026-11-12 22:14:30 +00:00
2026-11-11 18:58:21 +00:00
2026-11-12 04:32:34 +00:00
2026-11-12 21:03:15 +00:00
2026-11-12 22:43:46 +00:00
2026-11-07 10:41:36 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-04 23:46:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-06 17:47:31 +00:00
2026-11-10 11:17:06 +00:00
2026-11-10 09:54:57 +00:00
2026-11-10 08:34:17 +00:00
2026-11-12 00:27:01 +00:00
2026-11-11 06:41:15 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 00:44:27 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-03 15:02:57 +00:00
2026-11-12 05:21:30 +00:00
2026-11-12 00:28:56 +00:00
2026-11-04 00:52:58 +00:00
2026-11-12 19:43:12 +00:00
2026-11-12 04:32:34 +00:00
2026-11-12 17:31:24 +00:00
2026-11-12 23:51:52 +00:00