[yocto] [meta-security][PATCH] libseccomp: update to latest
Jonathan Liu
net147 at gmail.com
Sat Aug 6 18:29:20 PDT 2016
Signed-off-by: Jonathan Liu <net147 at gmail.com>
---
.../0001-arch-add-a-ppc64-syscall-table.patch | 1253 --------------------
.../0001-tests-create-install-tests-target.patch | 203 ----
...e-basic-initial-support-for-ppc64-to-the-.patch | 128 --
...tests-install-python-tests-if-appropriate.patch | 61 -
...ts-introduce-alternate-test-report-format.patch | 124 --
.../files/0003-tools-add-ppc64-support.patch | 80 --
...add-ppc64-support-to-the-regression-tests.patch | 118 --
...pc64-support-to-the-regression-live-tests.patch | 34 -
...ct-the-ppc64-syscall-table-and-validation.patch | 148 ---
...007-tests-minor-fix-in-arch-syscall-check.patch | 29 -
.../files/0008-arch-add-a-ppc-syscall-table.patch | 782 ------------
...sic-initial-ppc-support-to-the-arch-depen.patch | 117 --
.../files/0010-tools-add-ppc-support.patch | 70 --
...s-add-ppc-support-to-the-regression-tests.patch | 64 -
recipes-security/libseccomp/files/compiler.patch | 32 -
.../files/regresion_fixup_seq_usage.patch | 25 -
recipes-security/libseccomp/libseccomp.bb | 7 +-
17 files changed, 3 insertions(+), 3272 deletions(-)
delete mode 100644 recipes-security/libseccomp/files/0001-arch-add-a-ppc64-syscall-table.patch
delete mode 100644 recipes-security/libseccomp/files/0001-tests-create-install-tests-target.patch
delete mode 100644 recipes-security/libseccomp/files/0002-arch-add-the-basic-initial-support-for-ppc64-to-the-.patch
delete mode 100644 recipes-security/libseccomp/files/0002-tests-install-python-tests-if-appropriate.patch
delete mode 100644 recipes-security/libseccomp/files/0003-tests-introduce-alternate-test-report-format.patch
delete mode 100644 recipes-security/libseccomp/files/0003-tools-add-ppc64-support.patch
delete mode 100644 recipes-security/libseccomp/files/0004-tests-add-ppc64-support-to-the-regression-tests.patch
delete mode 100644 recipes-security/libseccomp/files/0005-tests-add-ppc64-support-to-the-regression-live-tests.patch
delete mode 100644 recipes-security/libseccomp/files/0006-ppc64-correct-the-ppc64-syscall-table-and-validation.patch
delete mode 100644 recipes-security/libseccomp/files/0007-tests-minor-fix-in-arch-syscall-check.patch
delete mode 100644 recipes-security/libseccomp/files/0008-arch-add-a-ppc-syscall-table.patch
delete mode 100644 recipes-security/libseccomp/files/0009-arch-add-basic-initial-ppc-support-to-the-arch-depen.patch
delete mode 100644 recipes-security/libseccomp/files/0010-tools-add-ppc-support.patch
delete mode 100644 recipes-security/libseccomp/files/0011-tests-add-ppc-support-to-the-regression-tests.patch
delete mode 100644 recipes-security/libseccomp/files/compiler.patch
delete mode 100644 recipes-security/libseccomp/files/regresion_fixup_seq_usage.patch
diff --git a/recipes-security/libseccomp/files/0001-arch-add-a-ppc64-syscall-table.patch b/recipes-security/libseccomp/files/0001-arch-add-a-ppc64-syscall-table.patch
deleted file mode 100644
index 3190aa0..0000000
--- a/recipes-security/libseccomp/files/0001-arch-add-a-ppc64-syscall-table.patch
+++ /dev/null
@@ -1,1253 +0,0 @@
-From a44e4f1fd956dd3250976deaa03c3c9ef1c2688a Mon Sep 17 00:00:00 2001
-From: Paul Moore <pmoore at redhat.com>
-Date: Thu, 25 Sep 2014 16:28:38 -0400
-Subject: [PATCH 01/11] arch: add a ppc64 syscall table
-
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- include/seccomp.h.in | 44 ++++
- src/Makefile.am | 3 +-
- src/arch-aarch64-syscalls.c | 7 +
- src/arch-arm-syscalls.c | 7 +
- src/arch-mips-syscalls.c | 7 +
- src/arch-mips64-syscalls.c | 7 +
- src/arch-mips64n32-syscalls.c | 7 +
- src/arch-ppc64-syscalls.c | 502 ++++++++++++++++++++++++++++++++++++++++++
- src/arch-ppc64.c | 40 ++++
- src/arch-ppc64.h | 39 ++++
- src/arch-syscall-check.c | 18 +-
- src/arch-syscall-dump.c | 9 +-
- src/arch-syscall-validate | 31 ++-
- src/arch-x32-syscalls.c | 7 +
- src/arch-x86-syscalls.c | 7 +
- src/arch-x86_64-syscalls.c | 7 +
- tools/util.h | 4 +
- 17 files changed, 739 insertions(+), 7 deletions(-)
- create mode 100644 src/arch-ppc64-syscalls.c
- create mode 100644 src/arch-ppc64.c
- create mode 100644 src/arch-ppc64.h
-
-diff --git a/include/seccomp.h.in b/include/seccomp.h.in
-index 6a115d1..42f3f1a 100644
---- a/include/seccomp.h.in
-+++ b/include/seccomp.h.in
-@@ -151,6 +151,15 @@ struct scmp_arg_cmp {
- #define SCMP_ARCH_MIPSEL64N32 AUDIT_ARCH_MIPSEL64N32
-
- /**
-+ * The PowerPC architecture tokens
-+ */
-+#define SCMP_ARCH_PPC64 AUDIT_ARCH_PPC64
-+#ifndef AUDIT_ARCH_PPC64LE
-+#define AUDIT_ARCH_PPC64LE (EM_PPC64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
-+#endif
-+#define SCMP_ARCH_PPC64LE AUDIT_ARCH_PPC64LE
-+
-+/**
- * Convert a syscall name into the associated syscall number
- * @param x the syscall name
- */
-@@ -1424,6 +1433,41 @@ int seccomp_export_bpf(const scmp_filter_ctx ctx, int fd);
- #define __NR_utimes __PNR_utimes
- #endif /* __NR_utimes */
-
-+#define __PNR_multiplexer -10180
-+#ifndef __NR_multiplexer
-+#define __NR_multiplexer __PNR_multiplexer
-+#endif /* __NR_multiplexer */
-+
-+#define __PNR_rtas -10181
-+#ifndef __NR_rtas
-+#define __NR_rtas __PNR_rtas
-+#endif /* __NR_rtas */
-+
-+#define __PNR_spu_create -10182
-+#ifndef __NR_spu_create
-+#define __NR_spu_create __PNR_spu_create
-+#endif /* __NR_spu_create */
-+
-+#define __PNR_spu_run -10183
-+#ifndef __NR_spu_run
-+#define __NR_spu_run __PNR_spu_run
-+#endif /* __NR_spu_run */
-+
-+#define __PNR_subpage_prot -10184
-+#ifndef __NR_subpage_prot
-+#define __NR_subpage_prot __PNR_subpage_prot
-+#endif /* __NR_subpage_prot */
-+
-+#define __PNR_swapcontext -10185
-+#ifndef __NR_swapcontext
-+#define __NR_swapcontext __PNR_swapcontext
-+#endif /* __NR_swapcontext */
-+
-+#define __PNR_sys_debug_setcontext -10186
-+#ifndef __NR_sys_debug_setcontext
-+#define __NR_sys_debug_setcontext __PNR_sys_debug_setcontext
-+#endif /* __NR_sys_debug_setcontext */
-+
- #ifdef __cplusplus
- }
- #endif
-diff --git a/src/Makefile.am b/src/Makefile.am
-index d8fbd85..038b2ef 100644
---- a/src/Makefile.am
-+++ b/src/Makefile.am
-@@ -30,7 +30,8 @@ SOURCES_ARCH = \
- arch-aarch64.h arch-aarch64.c arch-aarch64-syscalls.c \
- arch-mips.h arch-mips.c arch-mips-syscalls.c \
- arch-mips64.h arch-mips64.c arch-mips64-syscalls.c \
-- arch-mips64n32.h arch-mips64n32.c arch-mips64n32-syscalls.c
-+ arch-mips64n32.h arch-mips64n32.c arch-mips64n32-syscalls.c \
-+ arch-ppc64.h arch-ppc64.c arch-ppc64-syscalls.c
-
- SOURCES_GEN = \
- api.c system.h system.c \
-diff --git a/src/arch-aarch64-syscalls.c b/src/arch-aarch64-syscalls.c
-index f17172e..c76dae7 100644
---- a/src/arch-aarch64-syscalls.c
-+++ b/src/arch-aarch64-syscalls.c
-@@ -223,6 +223,7 @@ const struct arch_syscall_def aarch64_syscall_table[] = { \
- { "msgrcv", 188 },
- { "msgsnd", 189 },
- { "msync", 227 },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", 229 },
- { "munlockall", 231 },
- { "munmap", 215 },
-@@ -293,6 +294,7 @@ const struct arch_syscall_def aarch64_syscall_table[] = { \
- { "rt_sigsuspend", 133 },
- { "rt_sigtimedwait", 137 },
- { "rt_tgsigqueueinfo", 240 },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", 125 },
- { "sched_get_priority_min", 126 },
- { "sched_getaffinity", 123 },
-@@ -370,6 +372,8 @@ const struct arch_syscall_def aarch64_syscall_table[] = { \
- { "socketcall", __PNR_socketcall },
- { "socketpair", 199 },
- { "splice", 76 },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", __PNR_ssetmask },
- { "stat", __PNR_stat },
- { "stat64", __PNR_stat64 },
-@@ -377,6 +381,8 @@ const struct arch_syscall_def aarch64_syscall_table[] = { \
- { "statfs64", __PNR_statfs64 },
- { "stime", __PNR_stime },
- { "stty", __PNR_stty },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", 225 },
- { "swapon", 224 },
- { "symlink", __PNR_symlink },
-@@ -386,6 +392,7 @@ const struct arch_syscall_def aarch64_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", 267 },
- { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", __PNR_sysfs },
- { "sysinfo", 179 },
- { "syslog", 116 },
-diff --git a/src/arch-arm-syscalls.c b/src/arch-arm-syscalls.c
-index 8876135..b9400a3 100644
---- a/src/arch-arm-syscalls.c
-+++ b/src/arch-arm-syscalls.c
-@@ -234,6 +234,7 @@ const struct arch_syscall_def arm_syscall_table[] = { \
- { "msgrcv", (__NR_SYSCALL_BASE + 302) },
- { "msgsnd", (__NR_SYSCALL_BASE + 301) },
- { "msync", (__NR_SYSCALL_BASE + 144) },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", (__NR_SYSCALL_BASE + 151) },
- { "munlockall", (__NR_SYSCALL_BASE + 153) },
- { "munmap", (__NR_SYSCALL_BASE + 91) },
-@@ -304,6 +305,7 @@ const struct arch_syscall_def arm_syscall_table[] = { \
- { "rt_sigsuspend", (__NR_SYSCALL_BASE + 179) },
- { "rt_sigtimedwait", (__NR_SYSCALL_BASE + 177) },
- { "rt_tgsigqueueinfo", (__NR_SYSCALL_BASE + 363) },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", (__NR_SYSCALL_BASE + 159) },
- { "sched_get_priority_min", (__NR_SYSCALL_BASE + 160) },
- { "sched_getaffinity", (__NR_SYSCALL_BASE + 242) },
-@@ -381,6 +383,8 @@ const struct arch_syscall_def arm_syscall_table[] = { \
- { "socketcall", (__NR_SYSCALL_BASE + 102) },
- { "socketpair", (__NR_SYSCALL_BASE + 288) },
- { "splice", (__NR_SYSCALL_BASE + 340) },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", __PNR_ssetmask },
- { "stat", (__NR_SYSCALL_BASE + 106) },
- { "stat64", (__NR_SYSCALL_BASE + 195) },
-@@ -388,6 +392,8 @@ const struct arch_syscall_def arm_syscall_table[] = { \
- { "statfs64", (__NR_SYSCALL_BASE + 266) },
- { "stime", (__NR_SYSCALL_BASE + 25) },
- { "stty", __PNR_stty },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", (__NR_SYSCALL_BASE + 115) },
- { "swapon", (__NR_SYSCALL_BASE + 87) },
- { "symlink", (__NR_SYSCALL_BASE + 83) },
-@@ -397,6 +403,7 @@ const struct arch_syscall_def arm_syscall_table[] = { \
- { "sync_file_range2", (__NR_SYSCALL_BASE + 341) },
- { "syncfs", (__NR_SYSCALL_BASE + 373) },
- { "syscall", (__NR_SYSCALL_BASE + 113) },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", (__NR_SYSCALL_BASE + 135) },
- { "sysinfo", (__NR_SYSCALL_BASE + 116) },
- { "syslog", (__NR_SYSCALL_BASE + 103) },
-diff --git a/src/arch-mips-syscalls.c b/src/arch-mips-syscalls.c
-index 29831da..c318aa0 100644
---- a/src/arch-mips-syscalls.c
-+++ b/src/arch-mips-syscalls.c
-@@ -227,6 +227,7 @@ const struct arch_syscall_def mips_syscall_table[] = { \
- { "msgrcv", __PNR_msgrcv },
- { "msgsnd", __PNR_msgsnd },
- { "msync", (__NR_SYSCALL_BASE + 144) },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", (__NR_SYSCALL_BASE + 155) },
- { "munlockall", (__NR_SYSCALL_BASE + 157) },
- { "munmap", (__NR_SYSCALL_BASE + 91) },
-@@ -297,6 +298,7 @@ const struct arch_syscall_def mips_syscall_table[] = { \
- { "rt_sigsuspend", (__NR_SYSCALL_BASE + 199) },
- { "rt_sigtimedwait", (__NR_SYSCALL_BASE + 197) },
- { "rt_tgsigqueueinfo", (__NR_SYSCALL_BASE + 332) },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", (__NR_SYSCALL_BASE + 163) },
- { "sched_get_priority_min", (__NR_SYSCALL_BASE + 164) },
- { "sched_getaffinity", (__NR_SYSCALL_BASE + 240) },
-@@ -374,6 +376,8 @@ const struct arch_syscall_def mips_syscall_table[] = { \
- { "socketcall", (__NR_SYSCALL_BASE + 102) },
- { "socketpair", (__NR_SYSCALL_BASE + 184) },
- { "splice", (__NR_SYSCALL_BASE + 304) },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", (__NR_SYSCALL_BASE + 69) },
- { "stat", (__NR_SYSCALL_BASE + 106) },
- { "stat64", (__NR_SYSCALL_BASE + 213) },
-@@ -381,6 +385,8 @@ const struct arch_syscall_def mips_syscall_table[] = { \
- { "statfs64", (__NR_SYSCALL_BASE + 255) },
- { "stime", (__NR_SYSCALL_BASE + 25) },
- { "stty", (__NR_SYSCALL_BASE + 31) },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", (__NR_SYSCALL_BASE + 115) },
- { "swapon", (__NR_SYSCALL_BASE + 87) },
- { "symlink", (__NR_SYSCALL_BASE + 83) },
-@@ -390,6 +396,7 @@ const struct arch_syscall_def mips_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", (__NR_SYSCALL_BASE + 342) },
- { "syscall", (__NR_SYSCALL_BASE + 0) },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", (__NR_SYSCALL_BASE + 135) },
- { "sysinfo", (__NR_SYSCALL_BASE + 116) },
- { "syslog", (__NR_SYSCALL_BASE + 103) },
-diff --git a/src/arch-mips64-syscalls.c b/src/arch-mips64-syscalls.c
-index 8b1fe9e..007a472 100644
---- a/src/arch-mips64-syscalls.c
-+++ b/src/arch-mips64-syscalls.c
-@@ -227,6 +227,7 @@ const struct arch_syscall_def mips64_syscall_table[] = { \
- { "msgrcv", (__NR_SYSCALL_BASE + 68) },
- { "msgsnd", (__NR_SYSCALL_BASE + 67) },
- { "msync", (__NR_SYSCALL_BASE + 25) },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", (__NR_SYSCALL_BASE + 147) },
- { "munlockall", (__NR_SYSCALL_BASE + 149) },
- { "munmap", (__NR_SYSCALL_BASE + 11) },
-@@ -297,6 +298,7 @@ const struct arch_syscall_def mips64_syscall_table[] = { \
- { "rt_sigsuspend", (__NR_SYSCALL_BASE + 128) },
- { "rt_sigtimedwait", (__NR_SYSCALL_BASE + 126) },
- { "rt_tgsigqueueinfo", (__NR_SYSCALL_BASE + 291) },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", (__NR_SYSCALL_BASE + 143) },
- { "sched_get_priority_min", (__NR_SYSCALL_BASE + 144) },
- { "sched_getaffinity", (__NR_SYSCALL_BASE + 196) },
-@@ -374,6 +376,8 @@ const struct arch_syscall_def mips64_syscall_table[] = { \
- { "socketcall", __PNR_socketcall },
- { "socketpair", (__NR_SYSCALL_BASE + 52) },
- { "splice", (__NR_SYSCALL_BASE + 263) },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", __PNR_ssetmask },
- { "stat", (__NR_SYSCALL_BASE + 4) },
- { "stat64", __PNR_stat64 },
-@@ -381,6 +385,8 @@ const struct arch_syscall_def mips64_syscall_table[] = { \
- { "statfs64", __PNR_statfs64 },
- { "stime", __PNR_stime },
- { "stty", __PNR_stty },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", (__NR_SYSCALL_BASE + 163) },
- { "swapon", (__NR_SYSCALL_BASE + 162) },
- { "symlink", (__NR_SYSCALL_BASE + 86) },
-@@ -390,6 +396,7 @@ const struct arch_syscall_def mips64_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", (__NR_SYSCALL_BASE + 301) },
- { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", (__NR_SYSCALL_BASE + 136) },
- { "sysinfo", (__NR_SYSCALL_BASE + 97) },
- { "syslog", (__NR_SYSCALL_BASE + 101) },
-diff --git a/src/arch-mips64n32-syscalls.c b/src/arch-mips64n32-syscalls.c
-index da72899..ae1c9b8 100644
---- a/src/arch-mips64n32-syscalls.c
-+++ b/src/arch-mips64n32-syscalls.c
-@@ -227,6 +227,7 @@ const struct arch_syscall_def mips64n32_syscall_table[] = { \
- { "msgrcv", (__NR_SYSCALL_BASE + 68) },
- { "msgsnd", (__NR_SYSCALL_BASE + 67) },
- { "msync", (__NR_SYSCALL_BASE + 25) },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", (__NR_SYSCALL_BASE + 147) },
- { "munlockall", (__NR_SYSCALL_BASE + 149) },
- { "munmap", (__NR_SYSCALL_BASE + 11) },
-@@ -297,6 +298,7 @@ const struct arch_syscall_def mips64n32_syscall_table[] = { \
- { "rt_sigsuspend", (__NR_SYSCALL_BASE + 128) },
- { "rt_sigtimedwait", (__NR_SYSCALL_BASE + 126) },
- { "rt_tgsigqueueinfo", (__NR_SYSCALL_BASE + 295) },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", (__NR_SYSCALL_BASE + 143) },
- { "sched_get_priority_min", (__NR_SYSCALL_BASE + 144) },
- { "sched_getaffinity", (__NR_SYSCALL_BASE + 196) },
-@@ -374,6 +376,8 @@ const struct arch_syscall_def mips64n32_syscall_table[] = { \
- { "socketcall", __PNR_socketcall },
- { "socketpair", (__NR_SYSCALL_BASE + 52) },
- { "splice", (__NR_SYSCALL_BASE + 267) },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", __PNR_ssetmask },
- { "stat", (__NR_SYSCALL_BASE + 4) },
- { "stat64", __PNR_stat64 },
-@@ -381,6 +385,8 @@ const struct arch_syscall_def mips64n32_syscall_table[] = { \
- { "statfs64", (__NR_SYSCALL_BASE + 217) },
- { "stime", __PNR_stime },
- { "stty", __PNR_stty },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", (__NR_SYSCALL_BASE + 163) },
- { "swapon", (__NR_SYSCALL_BASE + 162) },
- { "symlink", (__NR_SYSCALL_BASE + 86) },
-@@ -390,6 +396,7 @@ const struct arch_syscall_def mips64n32_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", (__NR_SYSCALL_BASE + 306) },
- { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", (__NR_SYSCALL_BASE + 136) },
- { "sysinfo", (__NR_SYSCALL_BASE + 97) },
- { "syslog", (__NR_SYSCALL_BASE + 101) },
-diff --git a/src/arch-ppc64-syscalls.c b/src/arch-ppc64-syscalls.c
-new file mode 100644
-index 0000000..5dfb367
---- /dev/null
-+++ b/src/arch-ppc64-syscalls.c
-@@ -0,0 +1,502 @@
-+/**
-+ * Enhanced Seccomp PPC64 Specific Code
-+ *
-+ * Copyright (c) 2014 Red Hat <pmoore at redhat.com>
-+ * Author: Paul Moore <pmoore at redhat.com>
-+ *
-+ */
-+
-+/*
-+ * This library is free software; you can redistribute it and/or modify it
-+ * under the terms of version 2.1 of the GNU Lesser General Public License as
-+ * published by the Free Software Foundation.
-+ *
-+ * This library is distributed in the hope that it will be useful, but WITHOUT
-+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
-+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
-+ * for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public License
-+ * along with this library; if not, see <http://www.gnu.org/licenses>.
-+ */
-+
-+#include <string.h>
-+
-+#include <seccomp.h>
-+
-+#include "arch.h"
-+#include "arch-ppc64.h"
-+
-+/* NOTE: based on Linux 3.17-rc6+ */
-+const struct arch_syscall_def ppc64_syscall_table[] = { \
-+ { "_llseek", 140 },
-+ { "_newselect", 142 },
-+ { "_sysctl", 149 },
-+ { "accept", 330 },
-+ { "accept4", 344 },
-+ { "access", 33 },
-+ { "acct", 51 },
-+ { "add_key", 269 },
-+ { "adjtimex", 124 },
-+ { "afs_syscall", 137 },
-+ { "alarm", 27 },
-+ { "arm_fadvise64_64", __PNR_arm_fadvise64_64 },
-+ { "arm_sync_file_range", __PNR_arm_sync_file_range },
-+ { "arch_prctl", __PNR_arch_prctl },
-+ { "bdflush", 134 },
-+ { "bind", 327 },
-+ { "break", 17 },
-+ { "brk", 45 },
-+ { "cachectl", __PNR_cachectl },
-+ { "cacheflush", __PNR_cacheflush },
-+ { "capget", 183 },
-+ { "capset", 184 },
-+ { "chdir", 12 },
-+ { "chmod", 15 },
-+ { "chown", 181 },
-+ { "chown32", __PNR_chown32 },
-+ { "chroot", 61 },
-+ { "clock_adjtime", 347 },
-+ { "clock_getres", 247 },
-+ { "clock_gettime", 246 },
-+ { "clock_nanosleep", 248 },
-+ { "clock_settime", 245 },
-+ { "clone", 120 },
-+ { "close", 6 },
-+ { "connect", 328 },
-+ { "creat", 8 },
-+ { "create_module", 127 },
-+ { "delete_module", 129 },
-+ { "dup", 41 },
-+ { "dup2", 63 },
-+ { "dup3", 316 },
-+ { "epoll_create", 236 },
-+ { "epoll_create1", 315 },
-+ { "epoll_ctl", 237 },
-+ { "epoll_ctl_old", __PNR_epoll_ctl_old },
-+ { "epoll_pwait", 303 },
-+ { "epoll_wait", 238 },
-+ { "epoll_wait_old", __PNR_epoll_wait_old },
-+ { "eventfd", 307 },
-+ { "eventfd2", 314 },
-+ { "execve", 11 },
-+ { "exit", 1 },
-+ { "exit_group", 234 },
-+ { "faccessat", 298 },
-+ { "fadvise64", 233 },
-+ { "fadvise64_64", 254 },
-+ { "fallocate", 309 },
-+ { "fanotify_init", 323 },
-+ { "fanotify_mark", 324 },
-+ { "fchdir", 133 },
-+ { "fchmod", 94 },
-+ { "fchmodat", 297 },
-+ { "fchown", 95 },
-+ { "fchown32", __PNR_fchown32 },
-+ { "fchownat", 289 },
-+ { "fcntl", 55 },
-+ { "fcntl64", 204 },
-+ { "fdatasync", 148 },
-+ { "fgetxattr", 214 },
-+ { "finit_module", 353 },
-+ { "flistxattr", 217 },
-+ { "flock", 143 },
-+ { "fork", 2 },
-+ { "fremovexattr", 220 },
-+ { "fsetxattr", 211 },
-+ { "fstat", 108 },
-+ { "fstat64", 197 },
-+ { "fstatat64", 291 },
-+ { "fstatfs", 100 },
-+ { "fstatfs64", 253 },
-+ { "fsync", 118 },
-+ { "ftime", 35 },
-+ { "ftruncate", 93 },
-+ { "ftruncate64", 194 },
-+ { "futex", 221 },
-+ { "futimesat", 290 },
-+ { "get_kernel_syms", 130 },
-+ { "get_mempolicy", 260 },
-+ { "get_robust_list", 299 },
-+ { "get_thread_area", __PNR_get_thread_area },
-+ { "getcpu", 302 },
-+ { "getcwd", 182 },
-+ { "getdents", 141 },
-+ { "getdents64", 202 },
-+ { "getegid", 50 },
-+ { "getegid32", __PNR_getegid32 },
-+ { "geteuid", 49 },
-+ { "geteuid32", __PNR_geteuid32 },
-+ { "getgid", 47 },
-+ { "getgid32", __PNR_getgid32 },
-+ { "getgroups", 80 },
-+ { "getgroups32", __PNR_getgroups32 },
-+ { "getitimer", 105 },
-+ { "getpeername", 332 },
-+ { "getpgid", 132 },
-+ { "getpgrp", 65 },
-+ { "getpid", 20 },
-+ { "getpmsg", 187 },
-+ { "getppid", 64 },
-+ { "getpriority", 96 },
-+ { "getrandom", 359 },
-+ { "getresgid", 170 },
-+ { "getresgid32", __PNR_getresgid32 },
-+ { "getresuid", 165 },
-+ { "getresuid32", __PNR_getresuid32 },
-+ { "getrlimit", 76 },
-+ { "getrusage", 77 },
-+ { "getsid", 147 },
-+ { "getsockname", 331 },
-+ { "getsockopt", 340 },
-+ { "gettid", 207 },
-+ { "gettimeofday", 78 },
-+ { "getuid", 24 },
-+ { "getuid32", __PNR_getuid32 },
-+ { "getxattr", 212 },
-+ { "gtty", 32 },
-+ { "idle", 112 },
-+ { "init_module", 128 },
-+ { "inotify_add_watch", 276 },
-+ { "inotify_init", 275 },
-+ { "inotify_init1", 318 },
-+ { "inotify_rm_watch", 277 },
-+ { "io_cancel", 231 },
-+ { "io_destroy", 228 },
-+ { "io_getevents", 229 },
-+ { "io_setup", 227 },
-+ { "io_submit", 230 },
-+ { "ioctl", 54 },
-+ { "ioperm", 101 },
-+ { "iopl", 110 },
-+ { "ioprio_get", 274 },
-+ { "ioprio_set", 273 },
-+ { "ipc", 117 },
-+ { "kcmp", 354 },
-+ { "kexec_file_load", __PNR_kexec_file_load },
-+ { "kexec_load", 268 },
-+ { "keyctl", 271 },
-+ { "kill", 37 },
-+ { "lchown", 16 },
-+ { "lchown32", __PNR_lchown32 },
-+ { "lgetxattr", 213 },
-+ { "link", 9 },
-+ { "linkat", 294 },
-+ { "listen", 329 },
-+ { "listxattr", 215 },
-+ { "llistxattr", 216 },
-+ { "lock", 53 },
-+ { "lookup_dcookie", 235 },
-+ { "lremovexattr", 219 },
-+ { "lseek", 19 },
-+ { "lsetxattr", 210 },
-+ { "lstat", 107 },
-+ { "lstat64", 196 },
-+ { "madvise", 205 },
-+ { "mbind", 259 },
-+ { "memfd_create", 360 },
-+ { "migrate_pages", 258 },
-+ { "mincore", 206 },
-+ { "mkdir", 39 },
-+ { "mkdirat", 287 },
-+ { "mknod", 14 },
-+ { "mknodat", 288 },
-+ { "mlock", 150 },
-+ { "mlockall", 152 },
-+ { "mmap", 90 },
-+ { "mmap2", 192 },
-+ { "modify_ldt", 123 },
-+ { "mount", 21 },
-+ { "move_pages", 301 },
-+ { "mprotect", 125 },
-+ { "mpx", 56 },
-+ { "mq_getsetattr", 267 },
-+ { "mq_notify", 266 },
-+ { "mq_open", 262 },
-+ { "mq_timedreceive", 265 },
-+ { "mq_timedsend", 264 },
-+ { "mq_unlink", 263 },
-+ { "mremap", 163 },
-+ { "msgctl", __PNR_msgctl },
-+ { "msgget", __PNR_msgget },
-+ { "msgrcv", __PNR_msgrcv },
-+ { "msgsnd", __PNR_msgsnd },
-+ { "msync", 144 },
-+ { "multiplexer", 201 },
-+ { "munlock", 151 },
-+ { "munlockall", 153 },
-+ { "munmap", 91 },
-+ { "name_to_handle_at", 345 },
-+ { "nanosleep", 162 },
-+ { "newfstatat", __PNR_newfstatat },
-+ { "nfsservctl", 168 },
-+ { "nice", 34 },
-+ { "oldfstat", 28 },
-+ { "oldlstat", 84 },
-+ { "oldolduname", 59 },
-+ { "oldstat", 18 },
-+ { "olduname", 109 },
-+ { "oldwait4", __PNR_oldwait4 },
-+ { "open", 5 },
-+ { "open_by_handle_at", 346 },
-+ { "openat", 286 },
-+ { "pause", 29 },
-+ { "pciconfig_iobase", 200 },
-+ { "pciconfig_read", 198 },
-+ { "pciconfig_write", 199 },
-+ { "perf_event_open", 319 },
-+ { "personality", 136 },
-+ { "pipe", 42 },
-+ { "pipe2", 317 },
-+ { "pivot_root", 203 },
-+ { "poll", 167 },
-+ { "ppoll", 281 },
-+ { "prctl", 171 },
-+ { "pread64", 179 },
-+ { "preadv", 320 },
-+ { "prlimit64", 325 },
-+ { "process_vm_readv", 351 },
-+ { "process_vm_writev", 352 },
-+ { "prof", 44 },
-+ { "profil", 98 },
-+ { "pselect6", 280 },
-+ { "ptrace", 26 },
-+ { "putpmsg", 188 },
-+ { "pwrite64", 180 },
-+ { "pwritev", 321 },
-+ { "query_module", 166 },
-+ { "quotactl", 131 },
-+ { "read", 3 },
-+ { "readahead", 191 },
-+ { "readdir", 89 },
-+ { "readlink", 85 },
-+ { "readlinkat", 296 },
-+ { "readv", 145 },
-+ { "reboot", 88 },
-+ { "recv", 336 },
-+ { "recvfrom", 337 },
-+ { "recvmmsg", 343 },
-+ { "recvmsg", 342 },
-+ { "remap_file_pages", 239 },
-+ { "removexattr", 218 },
-+ { "rename", 38 },
-+ { "renameat", 293 },
-+ { "renameat2", 357 },
-+ { "request_key", 270 },
-+ { "restart_syscall", 0 },
-+ { "rmdir", 40 },
-+ { "rt_sigaction", 173 },
-+ { "rt_sigpending", 175 },
-+ { "rt_sigprocmask", 174 },
-+ { "rt_sigqueueinfo", 177 },
-+ { "rt_sigreturn", 172 },
-+ { "rt_sigsuspend", 178 },
-+ { "rt_sigtimedwait", 176 },
-+ { "rt_tgsigqueueinfo", 322 },
-+ { "rtas", 255 },
-+ { "sched_get_priority_max", 159 },
-+ { "sched_get_priority_min", 160 },
-+ { "sched_getaffinity", 223 },
-+ { "sched_getattr", 356 },
-+ { "sched_getparam", 155 },
-+ { "sched_getscheduler", 157 },
-+ { "sched_rr_get_interval", 161 },
-+ { "sched_setaffinity", 222 },
-+ { "sched_setattr", 355 },
-+ { "sched_setparam", 154 },
-+ { "sched_setscheduler", 156 },
-+ { "sched_yield", 158 },
-+ { "seccomp", 358 },
-+ { "security", __PNR_security },
-+ { "select", 82 },
-+ { "semctl", __PNR_semctl },
-+ { "semget", __PNR_semget },
-+ { "semop", __PNR_semop },
-+ { "semtimedop", __PNR_semtimedop },
-+ { "send", 334 },
-+ { "sendfile", 186 },
-+ { "sendfile64", 226 },
-+ { "sendmmsg", 349 },
-+ { "sendmsg", 341 },
-+ { "sendto", 335 },
-+ { "set_mempolicy", 261 },
-+ { "set_robust_list", 300 },
-+ { "set_thread_area", __PNR_set_thread_area },
-+ { "set_tid_address", 232 },
-+ { "setdomainname", 121 },
-+ { "setfsgid", 139 },
-+ { "setfsgid32", __PNR_setfsgid32 },
-+ { "setfsuid", 138 },
-+ { "setfsuid32", __PNR_setfsuid32 },
-+ { "setgid", 46 },
-+ { "setgid32", __PNR_setgid32 },
-+ { "setgroups", 81 },
-+ { "setgroups32", __PNR_setgroups32 },
-+ { "sethostname", 74 },
-+ { "setitimer", 104 },
-+ { "setns", 350 },
-+ { "setpgid", 57 },
-+ { "setpriority", 97 },
-+ { "setregid", 71 },
-+ { "setregid32", __PNR_setregid32 },
-+ { "setresgid", 169 },
-+ { "setresgid32", __PNR_setresgid32 },
-+ { "setresuid", 164 },
-+ { "setresuid32", __PNR_setresuid32 },
-+ { "setreuid", 70 },
-+ { "setreuid32", __PNR_setreuid32 },
-+ { "setrlimit", 75 },
-+ { "setsid", 66 },
-+ { "setsockopt", 339 },
-+ { "settimeofday", 79 },
-+ { "setuid", 23 },
-+ { "setuid32", __PNR_setuid32 },
-+ { "setxattr", 209 },
-+ { "sgetmask", 68 },
-+ { "shmat", __PNR_shmat },
-+ { "shmctl", __PNR_shmctl },
-+ { "shmdt", __PNR_shmdt },
-+ { "shmget", __PNR_shmget },
-+ { "shutdown", 338 },
-+ { "sigaction", 67 },
-+ { "sigaltstack", 185 },
-+ { "signal", 48 },
-+ { "signalfd", 305 },
-+ { "signalfd4", 313 },
-+ { "sigpending", 73 },
-+ { "sigprocmask", 126 },
-+ { "sigreturn", 119 },
-+ { "sigsuspend", 72 },
-+ { "socket", 326 },
-+ { "socketcall", 102 },
-+ { "socketpair", 333 },
-+ { "splice", 283 },
-+ { "spu_create", 279 },
-+ { "spu_run", 278 },
-+ { "ssetmask", 69 },
-+ { "stat", 106 },
-+ { "stat64", 195 },
-+ { "statfs", 99 },
-+ { "statfs64", 252 },
-+ { "stime", 25 },
-+ { "stty", 31 },
-+ { "subpage_prot", 310 },
-+ { "swapcontext", 249 },
-+ { "swapoff", 115 },
-+ { "swapon", 87 },
-+ { "symlink", 83 },
-+ { "symlinkat", 295 },
-+ { "sync", 36 },
-+ { "sync_file_range", __PNR_sync_file_range },
-+ { "sync_file_range2", 308 },
-+ { "syncfs", 348 },
-+ { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", 256 },
-+ { "sysfs", 135 },
-+ { "sysinfo", 116 },
-+ { "syslog", 103 },
-+ { "sysmips", __PNR_sysmips },
-+ { "tee", 284 },
-+ { "tgkill", 250 },
-+ { "time", 13 },
-+ { "timer_create", 240 },
-+ { "timer_delete", 244 },
-+ { "timer_getoverrun", 243 },
-+ { "timer_gettime", 242 },
-+ { "timer_settime", 241 },
-+ { "timerfd", __PNR_timerfd },
-+ { "timerfd_create", 306 },
-+ { "timerfd_gettime", 312 },
-+ { "timerfd_settime", 311 },
-+ { "times", 43 },
-+ { "tkill", 208 },
-+ { "truncate", 92 },
-+ { "truncate64", 193 },
-+ { "tuxcall", 225 },
-+ { "ugetrlimit", 190 },
-+ { "ulimit", 58 },
-+ { "umask", 60 },
-+ { "umount", 22 },
-+ { "umount2", 52 },
-+ { "uname", 122 },
-+ { "unlink", 10 },
-+ { "unlinkat", 292 },
-+ { "unshare", 282 },
-+ { "uselib", 86 },
-+ { "ustat", 62 },
-+ { "utime", 30 },
-+ { "utimensat", 304 },
-+ { "utimes", 251 },
-+ { "vfork", 189 },
-+ { "vhangup", 111 },
-+ { "vm86", 113 },
-+ { "vm86old", __PNR_vm86old },
-+ { "vmsplice", 285 },
-+ { "vserver", __PNR_vserver },
-+ { "wait4", 114 },
-+ { "waitid", 272 },
-+ { "waitpid", 7 },
-+ { "write", 4 },
-+ { "writev", 146 },
-+ { NULL, __NR_SCMP_ERROR },
-+};
-+
-+/**
-+ * Resolve a syscall name to a number
-+ * @param name the syscall name
-+ *
-+ * Resolve the given syscall name to the syscall number using the syscall table.
-+ * Returns the syscall number on success, including negative pseudo syscall
-+ * numbers; returns __NR_SCMP_ERROR on failure.
-+ *
-+ */
-+int ppc64_syscall_resolve_name(const char *name)
-+{
-+ unsigned int iter;
-+ const struct arch_syscall_def *table = ppc64_syscall_table;
-+
-+ /* XXX - plenty of room for future improvement here */
-+ for (iter = 0; table[iter].name != NULL; iter++) {
-+ if (strcmp(name, table[iter].name) == 0)
-+ return table[iter].num;
-+ }
-+
-+ return __NR_SCMP_ERROR;
-+}
-+
-+/**
-+ * Resolve a syscall number to a name
-+ * @param num the syscall number
-+ *
-+ * Resolve the given syscall number to the syscall name using the syscall table.
-+ * Returns a pointer to the syscall name string on success, including pseudo
-+ * syscall names; returns NULL on failure.
-+ *
-+ */
-+const char *ppc64_syscall_resolve_num(int num)
-+{
-+ unsigned int iter;
-+ const struct arch_syscall_def *table = ppc64_syscall_table;
-+
-+ /* XXX - plenty of room for future improvement here */
-+ for (iter = 0; table[iter].num != __NR_SCMP_ERROR; iter++) {
-+ if (num == table[iter].num)
-+ return table[iter].name;
-+ }
-+
-+ return NULL;
-+}
-+
-+/**
-+ * Iterate through the syscall table and return the syscall name
-+ * @param spot the offset into the syscall table
-+ *
-+ * Return the syscall name at position @spot or NULL on failure. This function
-+ * should only ever be used internally by libseccomp.
-+ *
-+ */
-+const char *ppc64_syscall_iterate_name(unsigned int spot)
-+{
-+ /* XXX - no safety checks here */
-+ return ppc64_syscall_table[spot].name;
-+}
-diff --git a/src/arch-ppc64.c b/src/arch-ppc64.c
-new file mode 100644
-index 0000000..5f461cb
---- /dev/null
-+++ b/src/arch-ppc64.c
-@@ -0,0 +1,40 @@
-+/**
-+ * Enhanced Seccomp PPC64 Specific Code
-+ *
-+ * Copyright (c) 2014 Red Hat <pmoore at redhat.com>
-+ * Author: Paul Moore <pmoore at redhat.com>
-+ *
-+ */
-+
-+/*
-+ * This library is free software; you can redistribute it and/or modify it
-+ * under the terms of version 2.1 of the GNU Lesser General Public License as
-+ * published by the Free Software Foundation.
-+ *
-+ * This library is distributed in the hope that it will be useful, but WITHOUT
-+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
-+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
-+ * for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public License
-+ * along with this library; if not, see <http://www.gnu.org/licenses>.
-+ */
-+
-+#include <linux/audit.h>
-+
-+#include "arch.h"
-+#include "arch-ppc64.h"
-+
-+const struct arch_def arch_def_ppc64 = {
-+ .token = SCMP_ARCH_PPC64,
-+ .token_bpf = AUDIT_ARCH_PPC64,
-+ .size = ARCH_SIZE_64,
-+ .endian = ARCH_ENDIAN_BIG,
-+};
-+
-+const struct arch_def arch_def_ppc64le = {
-+ .token = SCMP_ARCH_PPC64LE,
-+ .token_bpf = AUDIT_ARCH_PPC64LE,
-+ .size = ARCH_SIZE_64,
-+ .endian = ARCH_ENDIAN_LITTLE,
-+};
-diff --git a/src/arch-ppc64.h b/src/arch-ppc64.h
-new file mode 100644
-index 0000000..1aec743
---- /dev/null
-+++ b/src/arch-ppc64.h
-@@ -0,0 +1,39 @@
-+/**
-+ * Enhanced Seccomp PPC64 Specific Code
-+ *
-+ * Copyright (c) 2014 Red Hat <pmoore at redhat.com>
-+ * Author: Paul Moore <pmoore at redhat.com>
-+ *
-+ */
-+
-+/*
-+ * This library is free software; you can redistribute it and/or modify it
-+ * under the terms of version 2.1 of the GNU Lesser General Public License as
-+ * published by the Free Software Foundation.
-+ *
-+ * This library is distributed in the hope that it will be useful, but WITHOUT
-+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
-+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
-+ * for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public License
-+ * along with this library; if not, see <http://www.gnu.org/licenses>.
-+ */
-+
-+#ifndef _ARCH_PPC64_H
-+#define _ARCH_PPC64_H
-+
-+#include <inttypes.h>
-+
-+#include "arch.h"
-+#include "system.h"
-+
-+extern const struct arch_def arch_def_ppc64;
-+extern const struct arch_def arch_def_ppc64le;
-+
-+int ppc64_syscall_resolve_name(const char *name);
-+const char *ppc64_syscall_resolve_num(int num);
-+
-+const char *ppc64_syscall_iterate_name(unsigned int spot);
-+
-+#endif
-diff --git a/src/arch-syscall-check.c b/src/arch-syscall-check.c
-index a074c9d..dadab0d 100644
---- a/src/arch-syscall-check.c
-+++ b/src/arch-syscall-check.c
-@@ -33,6 +33,7 @@
- #include "arch-mips.h"
- #include "arch-mips64.h"
- #include "arch-mips64n32.h"
-+#include "arch-ppc64.h"
-
- /**
- * compare the syscall values
-@@ -67,6 +68,7 @@ int main(int argc, char *argv[])
- int i_mips = 0;
- int i_mips64 = 0;
- int i_mips64n32 = 0;
-+ int i_ppc64 = 0;
- const char *sys_name;
- char str_miss[256];
-
-@@ -93,6 +95,8 @@ int main(int argc, char *argv[])
- mips64_syscall_iterate_name(i_mips64));
- syscall_check(str_miss, sys_name, "mips64n32",
- mips64n32_syscall_iterate_name(i_mips64n32));
-+ syscall_check(str_miss, sys_name, "ppc64",
-+ ppc64_syscall_iterate_name(i_mips64n32));
-
- /* output the results */
- printf("%s: ", sys_name);
-@@ -111,17 +115,20 @@ int main(int argc, char *argv[])
- i_x32 = -1;
- if (!arm_syscall_iterate_name(++i_arm))
- i_arm = -1;
-+ if (!aarch64_syscall_iterate_name(++i_aarch64))
-+ i_aarch64 = -1;
- if (!mips_syscall_iterate_name(++i_mips))
- i_mips = -1;
- if (!mips64_syscall_iterate_name(++i_mips64))
- i_mips64 = -1;
- if (!mips64n32_syscall_iterate_name(++i_mips64n32))
- i_mips64n32 = -1;
-- if (!aarch64_syscall_iterate_name(++i_aarch64))
-- i_aarch64 = -1;
-+ if (!ppc64_syscall_iterate_name(++i_ppc64))
-+ i_ppc64 = -1;
- } while (i_x86_64 >= 0 && i_x32 >= 0 &&
- i_arm >= 0 && i_aarch64 >= 0 &&
-- i_mips >= 0 && i_mips64 >= 0 && i_mips64n32 >= 0);
-+ i_mips >= 0 && i_mips64 >= 0 && i_mips64n32 >= 0 &&
-+ i_ppc64 >= 0);
-
- /* check for any leftovers */
- sys_name = x86_syscall_iterate_name(i_x86 + 1);
-@@ -164,6 +171,11 @@ int main(int argc, char *argv[])
- mips64n32_syscall_iterate_name(i_mips64n32));
- return 1;
- }
-+ if (i_ppc64 >= 0) {
-+ printf("%s: ERROR, ppc64 has additional syscalls\n",
-+ ppc64_syscall_iterate_name(i_ppc64));
-+ return 1;
-+ }
-
- /* if we made it here, all is good */
- return 0;
-diff --git a/src/arch-syscall-dump.c b/src/arch-syscall-dump.c
-index 4f53070..985a250 100644
---- a/src/arch-syscall-dump.c
-+++ b/src/arch-syscall-dump.c
-@@ -38,6 +38,7 @@
- #include "arch-mips64.h"
- #include "arch-mips64n32.h"
- #include "arch-aarch64.h"
-+#include "arch-ppc64.h"
-
- /**
- * Print the usage information to stderr and exit
-@@ -97,6 +98,9 @@ int main(int argc, char *argv[])
- case SCMP_ARCH_ARM:
- sys_name = arm_syscall_iterate_name(iter);
- break;
-+ case SCMP_ARCH_AARCH64:
-+ sys_name = aarch64_syscall_iterate_name(iter);
-+ break;
- case SCMP_ARCH_MIPS:
- case SCMP_ARCH_MIPSEL:
- sys_name = mips_syscall_iterate_name(iter);
-@@ -109,9 +113,10 @@ int main(int argc, char *argv[])
- case SCMP_ARCH_MIPSEL64N32:
- sys_name = mips64n32_syscall_iterate_name(iter);
- break;
-- case SCMP_ARCH_AARCH64:
-- sys_name = aarch64_syscall_iterate_name(iter);
-+ case SCMP_ARCH_PPC64:
-+ sys_name = ppc64_syscall_iterate_name(iter);
- break;
-+
- default:
- /* invalid arch */
- exit_usage(argv[0]);
-diff --git a/src/arch-syscall-validate b/src/arch-syscall-validate
-index 2cbf696..eeb4d8b 100755
---- a/src/arch-syscall-validate
-+++ b/src/arch-syscall-validate
-@@ -303,6 +303,29 @@ function dump_lib_mips64n32() {
- }
-
- #
-+# Dump the ppc64 system syscall table
-+#
-+# Arguments:
-+# 1 path to the kernel source
-+#
-+# Dump the architecture's syscall table to stdout.
-+#
-+function dump_sys_ppc64() {
-+ gcc -E -dM $1/arch/powerpc/include/uapi/asm/unistd.h | \
-+ grep "^#define __NR_" | sort | \
-+ sed -e 's/#define[ \t]\+__NR_\([a-z0-9_]\+\)[ \t]\+\([0-9]\+\)/\1\t\2/'
-+}
-+
-+#
-+# Dump the ppc64 library syscall table
-+#
-+# Dump the library's syscall table to stdout.
-+#
-+function dump_lib_ppc64() {
-+ $LIB_SYS_DUMP -a ppc64 | sed -e '/[^\t]\+\t-[0-9]\+/d'
-+}
-+
-+#
- # Dump the system syscall table
- #
- # Arguments:
-@@ -337,6 +360,9 @@ function dump_sys() {
- mips64n32)
- dump_sys_mips64n32 "$2"
- ;;
-+ ppc64)
-+ dump_sys_ppc64 "$2"
-+ ;;
- *)
- echo ""
- ;;
-@@ -377,6 +403,9 @@ function dump_lib() {
- mips64n32)
- dump_lib_mips64n32 "$2"
- ;;
-+ ppc64)
-+ dump_lib_ppc64 "$2"
-+ ;;
- *)
- echo ""
- ;;
-@@ -413,7 +442,7 @@ shift $(($OPTIND - 1))
-
- # defaults
- if [[ $arches == "" ]]; then
-- arches="x86 x86_64 x32 arm aarch64 mips mips64 mips64n32"
-+ arches="x86 x86_64 x32 arm aarch64 mips mips64 mips64n32 ppc64"
- fi
-
- # sanity checks
-diff --git a/src/arch-x32-syscalls.c b/src/arch-x32-syscalls.c
-index 7876aa7..578d534 100644
---- a/src/arch-x32-syscalls.c
-+++ b/src/arch-x32-syscalls.c
-@@ -223,6 +223,7 @@ const struct arch_syscall_def x32_syscall_table[] = { \
- { "msgrcv", (X32_SYSCALL_BIT + 70) },
- { "msgsnd", (X32_SYSCALL_BIT + 69) },
- { "msync", (X32_SYSCALL_BIT + 26) },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", (X32_SYSCALL_BIT + 150) },
- { "munlockall", (X32_SYSCALL_BIT + 152) },
- { "munmap", (X32_SYSCALL_BIT + 11) },
-@@ -293,6 +294,7 @@ const struct arch_syscall_def x32_syscall_table[] = { \
- { "rt_sigsuspend", (X32_SYSCALL_BIT + 130) },
- { "rt_sigtimedwait", (X32_SYSCALL_BIT + 523) },
- { "rt_tgsigqueueinfo", (X32_SYSCALL_BIT + 536) },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", (X32_SYSCALL_BIT + 146) },
- { "sched_get_priority_min", (X32_SYSCALL_BIT + 147) },
- { "sched_getaffinity", (X32_SYSCALL_BIT + 204) },
-@@ -370,6 +372,8 @@ const struct arch_syscall_def x32_syscall_table[] = { \
- { "socketcall", __PNR_socketcall },
- { "socketpair", (X32_SYSCALL_BIT + 53) },
- { "splice", (X32_SYSCALL_BIT + 275) },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", __PNR_ssetmask },
- { "stat", (X32_SYSCALL_BIT + 4) },
- { "stat64", __PNR_stat64 },
-@@ -377,6 +381,8 @@ const struct arch_syscall_def x32_syscall_table[] = { \
- { "statfs64", __PNR_statfs64 },
- { "stime", __PNR_stime },
- { "stty", __PNR_stty },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", (X32_SYSCALL_BIT + 168) },
- { "swapon", (X32_SYSCALL_BIT + 167) },
- { "symlink", (X32_SYSCALL_BIT + 88) },
-@@ -386,6 +392,7 @@ const struct arch_syscall_def x32_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", (X32_SYSCALL_BIT + 306) },
- { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", (X32_SYSCALL_BIT + 139) },
- { "sysinfo", (X32_SYSCALL_BIT + 99) },
- { "syslog", (X32_SYSCALL_BIT + 103) },
-diff --git a/src/arch-x86-syscalls.c b/src/arch-x86-syscalls.c
-index 1d36c0b..92343f0 100644
---- a/src/arch-x86-syscalls.c
-+++ b/src/arch-x86-syscalls.c
-@@ -223,6 +223,7 @@ const struct arch_syscall_def x86_syscall_table[] = { \
- { "msgrcv", __PNR_msgrcv },
- { "msgsnd", __PNR_msgsnd },
- { "msync", 144 },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", 151 },
- { "munlockall", 153 },
- { "munmap", 91 },
-@@ -293,6 +294,7 @@ const struct arch_syscall_def x86_syscall_table[] = { \
- { "rt_sigsuspend", 179 },
- { "rt_sigtimedwait", 177 },
- { "rt_tgsigqueueinfo", 335 },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", 159 },
- { "sched_get_priority_min", 160 },
- { "sched_getaffinity", 242 },
-@@ -370,6 +372,8 @@ const struct arch_syscall_def x86_syscall_table[] = { \
- { "socketcall", 102 },
- { "socketpair", __PNR_socketpair },
- { "splice", 313 },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", 69 },
- { "stat", 106 },
- { "stat64", 195 },
-@@ -377,6 +381,8 @@ const struct arch_syscall_def x86_syscall_table[] = { \
- { "statfs64", 268 },
- { "stime", 25 },
- { "stty", 31 },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", 115 },
- { "swapon", 87 },
- { "symlink", 83 },
-@@ -386,6 +392,7 @@ const struct arch_syscall_def x86_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", 344 },
- { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", 135 },
- { "sysinfo", 116 },
- { "syslog", 103 },
-diff --git a/src/arch-x86_64-syscalls.c b/src/arch-x86_64-syscalls.c
-index 69c22ab..d0d4241 100644
---- a/src/arch-x86_64-syscalls.c
-+++ b/src/arch-x86_64-syscalls.c
-@@ -223,6 +223,7 @@ const struct arch_syscall_def x86_64_syscall_table[] = { \
- { "msgrcv", 70 },
- { "msgsnd", 69 },
- { "msync", 26 },
-+ { "multiplexer", __PNR_multiplexer },
- { "munlock", 150 },
- { "munlockall", 152 },
- { "munmap", 11 },
-@@ -293,6 +294,7 @@ const struct arch_syscall_def x86_64_syscall_table[] = { \
- { "rt_sigsuspend", 130 },
- { "rt_sigtimedwait", 128 },
- { "rt_tgsigqueueinfo", 297 },
-+ { "rtas", __PNR_rtas },
- { "sched_get_priority_max", 146 },
- { "sched_get_priority_min", 147 },
- { "sched_getaffinity", 204 },
-@@ -370,6 +372,8 @@ const struct arch_syscall_def x86_64_syscall_table[] = { \
- { "socketcall", __PNR_socketcall },
- { "socketpair", 53 },
- { "splice", 275 },
-+ { "spu_create", __PNR_spu_create },
-+ { "spu_run", __PNR_spu_run },
- { "ssetmask", __PNR_ssetmask },
- { "stat", 4 },
- { "stat64", __PNR_stat64 },
-@@ -377,6 +381,8 @@ const struct arch_syscall_def x86_64_syscall_table[] = { \
- { "statfs64", __PNR_statfs64 },
- { "stime", __PNR_stime },
- { "stty", __PNR_stty },
-+ { "subpage_prot", __PNR_subpage_prot },
-+ { "swapcontext", __PNR_swapcontext },
- { "swapoff", 168 },
- { "swapon", 167 },
- { "symlink", 88 },
-@@ -386,6 +392,7 @@ const struct arch_syscall_def x86_64_syscall_table[] = { \
- { "sync_file_range2", __PNR_sync_file_range2 },
- { "syncfs", 306 },
- { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
- { "sysfs", 139 },
- { "sysinfo", 99 },
- { "syslog", 103 },
-diff --git a/tools/util.h b/tools/util.h
-index 261320f..95b06c9 100644
---- a/tools/util.h
-+++ b/tools/util.h
-@@ -47,6 +47,10 @@
- #define AUDIT_ARCH_AARCH64 (EM_AARCH64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
- #endif
-
-+#ifndef AUDIT_ARCH_PPC64LE
-+#define AUDIT_ARCH_PPC64LE (EM_PPC64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
-+#endif
-+
- extern uint32_t arch;
-
- void exit_usage(const char *program);
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0001-tests-create-install-tests-target.patch b/recipes-security/libseccomp/files/0001-tests-create-install-tests-target.patch
deleted file mode 100644
index 55eaf81..0000000
--- a/recipes-security/libseccomp/files/0001-tests-create-install-tests-target.patch
+++ /dev/null
@@ -1,203 +0,0 @@
-From e8e166cdc1fc31e02d568424e17b9f9fc1e95256 Mon Sep 17 00:00:00 2001
-From: Joe MacDonald <joe at deserted.net>
-Date: Mon, 28 Oct 2013 15:40:14 -0400
-Subject: [PATCH 1/3] tests: create install-tests target
-
-It can be useful, in particular on a cross-build setup, to install the
-tests and regression suite in addition to the library itself. Since most
-people probably don't want that by default, though, create an
-install-tests target that will place tests and regression script in
-$(INSTALL_LIB_DIR)/libseccomp/tests and install the necessary tools in
-$(INSTALL_BIN_DIR)/bin.
-
-Upstream-Status: Submitted [http://www.mail-archive.com/libseccomp-discuss@lists.sourceforge.net/msg00470.html]
-
-Signed-off-by: Joe MacDonald <joe at deserted.net>
----
- Makefile | 9 +++++++++
- README | 8 ++++++++
- install.mk | 1 +
- macros.mk | 18 ++++++++++++++++++
- tests/Makefile | 7 ++++++-
- tests/regression | 19 ++++++++++++++++---
- tools/Makefile | 3 +++
- 7 files changed, 61 insertions(+), 4 deletions(-)
-
-diff --git a/Makefile b/Makefile
-index 1f61f20..8cb0a16 100644
---- a/Makefile
-+++ b/Makefile
-@@ -40,6 +40,7 @@ include install.mk
- CONFIGS = configure.mk configure.h version_info.mk libseccomp.pc
- SUBDIRS_BUILD = include src tests tools
- SUBDIRS_INSTALL = include src tools doc
-+SUBDIRS_INSTALL_TEST = tools tests
-
- .PHONY: tarball install check check-syntax ctags cstags clean dist-clean \
- $(SUBDIRS_BUILD)
-@@ -106,6 +107,14 @@ check: tools tests
- check-syntax:
- @./tools/check-syntax
-
-+install-tests: $(SUBDIRS_INSTALL_TEST)
-+ @$(ECHO_INFO) "installing tests in $(INSTALL_PREFIX) ..."
-+ $(ECHO_INFO) "installing from $$dir/"
-+ @for dir in $(SUBDIRS_INSTALL_TEST); do \
-+ $(ECHO_INFO) "installing from $$dir/"; \
-+ $(MAKE) -C $$dir install-tests; \
-+ done
-+
- ctags:
- @$(ECHO_INFO) "generating ctags for the project ..."
- @ctags -R *
-diff --git a/README b/README
-index 37b9709..14ae254 100644
---- a/README
-+++ b/README
-@@ -41,6 +41,14 @@ to run all of the tests you can simply run the script:
- However, the script takes a number of options to customize its execution; the
- options can be displayed by running "./regression -h".
-
-+It is also possible to install the tests and regression script to the system by
-+issuing:
-+
-+ # make install-tests
-+
-+When complete, installed tests and regression script may be found in
-+$LIBDIR/lib/libseccomp/test
-+
- * Other Useful Tools
-
- The "tools/" directory includes a number of tools which may be helpful in the
-diff --git a/install.mk b/install.mk
-index 123af33..f6aa311 100644
---- a/install.mk
-+++ b/install.mk
-@@ -24,6 +24,7 @@ INSTALL_PREFIX ?= $(CONF_INSTALL_PREFIX)
- INSTALL_SBIN_DIR ?= $(DESTDIR)/$(INSTALL_PREFIX)/sbin
- INSTALL_BIN_DIR ?= $(DESTDIR)/$(INSTALL_PREFIX)/bin
- INSTALL_LIB_DIR ?= $(DESTDIR)/$(CONF_INSTALL_LIBDIR)
-+INSTALL_TEST_DIR ?= $(DESTDIR)/$(CONF_INSTALL_LIBDIR)/libseccomp/tests
- INSTALL_INC_DIR ?= $(DESTDIR)/$(INSTALL_PREFIX)/include
- INSTALL_MAN_DIR ?= $(DESTDIR)/$(INSTALL_PREFIX)/share/man
-
-diff --git a/macros.mk b/macros.mk
-index 6df5b3a..e7c196d 100644
---- a/macros.mk
-+++ b/macros.mk
-@@ -206,6 +206,24 @@ INSTALL_INC_MACRO += \
- $^ "$(INSTALL_INC_DIR)";
-
- ifeq ($(V),0)
-+ INSTALL_TEST_MACRO = @echo " INSTALL $^ ($(INSTALL_TEST_DIR))";
-+endif
-+INSTALL_TEST_MACRO += \
-+ $(INSTALL) -o $(INSTALL_OWNER) -g $(INSTALL_GROUP) \
-+ -d "$(INSTALL_TEST_DIR)"; \
-+ $(INSTALL) -o $(INSTALL_OWNER) -g $(INSTALL_GROUP) -m 0755 \
-+ $^ "$(INSTALL_TEST_DIR)";
-+
-+ifeq ($(V),0)
-+ INSTALL_REGRESSION_TEST_MACRO = @echo " INSTALL regression ($(INSTALL_TEST_DIR))";
-+endif
-+INSTALL_REGRESSION_TEST_MACRO += \
-+ $(INSTALL) -o $(INSTALL_OWNER) -g $(INSTALL_GROUP) \
-+ -d "$(INSTALL_TEST_DIR)"; \
-+ $(INSTALL) -o $(INSTALL_OWNER) -g $(INSTALL_GROUP) -m 0755 \
-+ regression "$(INSTALL_TEST_DIR)";
-+
-+ifeq ($(V),0)
- INSTALL_MAN1_MACRO = \
- @echo " INSTALL manpages ($(INSTALL_MAN_DIR)/man1)";
- endif
-diff --git a/tests/Makefile b/tests/Makefile
-index 5fdbca7..135551c 100644
---- a/tests/Makefile
-+++ b/tests/Makefile
-@@ -31,6 +31,7 @@ include ../macros.mk
-
- include $(TOPDIR)/version_info.mk
- include $(TOPDIR)/configure.mk
-+include $(TOPDIR)/install.mk
-
- OBJS = util.o
-
-@@ -71,7 +72,7 @@ DEPS_TESTS = $(TESTS:%=%.d)
- # targets
- #
-
--.PHONY: check clean
-+.PHONY: check clean install-tests
-
- all: $(TESTS) $(OBJS)
-
-@@ -91,5 +92,9 @@ $(TEST_PRIVATE): 00-test.c $(OBJS) ../src/libseccomp.a
- check: $(TESTS)
- ./regression
-
-+install-tests: $(TESTS) $(TESTS:%=%.tests)
-+ $(INSTALL_TEST_MACRO)
-+ $(INSTALL_REGRESSION_TEST_MACRO)
-+
- clean:
- $(RM) $(DEPS_TESTS) $(DEPS_OBJS) $(TESTS) $(TEST_PRIVATE) $(OBJS) *.pyc
-diff --git a/tests/regression b/tests/regression
-index 790d5e1..3c293a4 100755
---- a/tests/regression
-+++ b/tests/regression
-@@ -23,9 +23,18 @@
-
- GLBL_ARCH_SUPPORT="x86 x86_64 x32 arm"
-
--GLBL_SYS_ARCH="../tools/scmp_arch_detect"
--GLBL_SYS_RESOLVER="../tools/scmp_sys_resolver"
--GLBL_SYS_SIM="../tools/scmp_bpf_sim"
-+GLBL_SYS_PATH=$(dirname $(readlink -m $0))
-+if [ -d $GLBL_SYS_PATH/../tools/ ]; then
-+ # prepend ../tools to $PATH so we can use verify_deps to check for
-+ # scmp_* support binaries if regression is running out of the build
-+ # tree.
-+ PATH=$GLBL_SYS_PATH/../tools/:$PATH
-+ export PATH
-+fi
-+
-+GLBL_SYS_ARCH=$(which scmp_arch_detect)
-+GLBL_SYS_RESOLVER=$(which scmp_sys_resolver)
-+GLBL_SYS_SIM=$(which scmp_bpf_sim)
-
- ####
- # functions
-@@ -761,6 +770,9 @@ verify_deps head
- verify_deps sed
- verify_deps seq
- verify_deps tr
-+verify_deps scmp_arch_detect
-+verify_deps scmp_sys_resolver
-+verify_deps scmp_bpf_sim
-
- # global variables
- declare -a batch_list
-@@ -865,6 +877,7 @@ arch=$($GLBL_SYS_ARCH)
- # display the test output and run the requested tests
- echo "=============== $(date) ===============" >&$logfd
- echo "Regression Test Report (\"regression $*\")" >&$logfd
-+cd $(dirname $0)
- for mode in $mode_list; do
- run_tests
- done
-diff --git a/tools/Makefile b/tools/Makefile
-index 79c7d25..9f4ffea 100644
---- a/tools/Makefile
-+++ b/tools/Makefile
-@@ -62,5 +62,8 @@ $(TOOLS):
- install: $(TOOLS_INSTALL)
- $(INSTALL_BIN_MACRO)
-
-+install-tests: $(TOOLS)
-+ $(INSTALL_BIN_MACRO)
-+
- clean:
- $(RM) $(DEPS) $(TOOLS)
---
-1.7.10.4
-
diff --git a/recipes-security/libseccomp/files/0002-arch-add-the-basic-initial-support-for-ppc64-to-the-.patch b/recipes-security/libseccomp/files/0002-arch-add-the-basic-initial-support-for-ppc64-to-the-.patch
deleted file mode 100644
index 15bc0a8..0000000
--- a/recipes-security/libseccomp/files/0002-arch-add-the-basic-initial-support-for-ppc64-to-the-.patch
+++ /dev/null
@@ -1,128 +0,0 @@
-From 70c69945bf0da09baec2e109ba19b883de4d0e80 Mon Sep 17 00:00:00 2001
-From: Paul Moore <pmoore at redhat.com>
-Date: Fri, 26 Sep 2014 12:06:18 -0400
-Subject: [PATCH 02/11] arch: add the basic initial support for ppc64 to the
- arch-dependent code
-
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- src/arch.c | 21 +++++++++++++++++++++
- src/python/libseccomp.pxd | 2 ++
- src/python/seccomp.pyx | 7 +++++++
- 3 files changed, 30 insertions(+)
-
-diff --git a/src/arch.c b/src/arch.c
-index e29b579..64fc1d1 100644
---- a/src/arch.c
-+++ b/src/arch.c
-@@ -38,6 +38,7 @@
- #include "arch-mips.h"
- #include "arch-mips64.h"
- #include "arch-mips64n32.h"
-+#include "arch-ppc64.h"
- #include "system.h"
-
- #define default_arg_count_max 6
-@@ -74,6 +75,12 @@ const struct arch_def *arch_def_native = &arch_def_mips64n32;
- #elif __MIPSEL__
- const struct arch_def *arch_def_native = &arch_def_mipsel64n32;
- #endif /* _MIPS_SIM_NABI32 */
-+#elif __PPC64__
-+#ifdef __BIG_ENDIAN__
-+const struct arch_def *arch_def_native = &arch_def_ppc64;
-+#else
-+const struct arch_def *arch_def_native = &arch_def_ppc64le;
-+#endif
- #else
- #error the arch code needs to know about your machine type
- #endif /* machine type guess */
-@@ -122,6 +129,10 @@ const struct arch_def *arch_def_lookup(uint32_t token)
- return &arch_def_mips64n32;
- case SCMP_ARCH_MIPSEL64N32:
- return &arch_def_mipsel64n32;
-+ case SCMP_ARCH_PPC64:
-+ return &arch_def_ppc64;
-+ case SCMP_ARCH_PPC64LE:
-+ return &arch_def_ppc64le;
- }
-
- return NULL;
-@@ -158,6 +169,10 @@ const struct arch_def *arch_def_lookup_name(const char *arch_name)
- return &arch_def_mips64n32;
- else if (strcmp(arch_name, "mipsel64n32") == 0)
- return &arch_def_mipsel64n32;
-+ else if (strcmp(arch_name, "ppc64") == 0)
-+ return &arch_def_ppc64;
-+ else if (strcmp(arch_name, "ppc64le") == 0)
-+ return &arch_def_ppc64le;
-
- return NULL;
- }
-@@ -276,6 +291,9 @@ int arch_syscall_resolve_name(const struct arch_def *arch, const char *name)
- case SCMP_ARCH_MIPS64N32:
- case SCMP_ARCH_MIPSEL64N32:
- return mips64n32_syscall_resolve_name(name);
-+ case SCMP_ARCH_PPC64:
-+ case SCMP_ARCH_PPC64LE:
-+ return ppc64_syscall_resolve_name(name);
- }
-
- return __NR_SCMP_ERROR;
-@@ -313,6 +331,9 @@ const char *arch_syscall_resolve_num(const struct arch_def *arch, int num)
- case SCMP_ARCH_MIPS64N32:
- case SCMP_ARCH_MIPSEL64N32:
- return mips64n32_syscall_resolve_num(num);
-+ case SCMP_ARCH_PPC64:
-+ case SCMP_ARCH_PPC64LE:
-+ return ppc64_syscall_resolve_num(num);
- }
-
- return NULL;
-diff --git a/src/python/libseccomp.pxd b/src/python/libseccomp.pxd
-index 2b50f3f..a546550 100644
---- a/src/python/libseccomp.pxd
-+++ b/src/python/libseccomp.pxd
-@@ -38,6 +38,8 @@ cdef extern from "seccomp.h":
- SCMP_ARCH_MIPSEL
- SCMP_ARCH_MIPSEL64
- SCMP_ARCH_MIPSEL64N32
-+ SCMP_ARCH_PPC64
-+ SCMP_ARCH_PPC64LE
-
- cdef enum scmp_filter_attr:
- SCMP_FLTATR_ACT_DEFAULT
-diff --git a/src/python/seccomp.pyx b/src/python/seccomp.pyx
-index d2f7c90..f30a0b6 100644
---- a/src/python/seccomp.pyx
-+++ b/src/python/seccomp.pyx
-@@ -147,6 +147,7 @@ cdef class Arch:
- MIPSEL - MIPS little endian O32 ABI
- MIPSEL64 - MIPS little endian 64-bit ABI
- MIPSEL64N32 - MIPS little endian N32 ABI
-+ PPC64 - 64-bit PowerPC
- """
-
- cdef int _token
-@@ -163,6 +164,8 @@ cdef class Arch:
- MIPSEL = libseccomp.SCMP_ARCH_MIPSEL
- MIPSEL64 = libseccomp.SCMP_ARCH_MIPSEL64
- MIPSEL64N32 = libseccomp.SCMP_ARCH_MIPSEL64N32
-+ PPC64 = libseccomp.SCMP_ARCH_PPC64
-+ PPC64 = libseccomp.SCMP_ARCH_PPC64LE
-
- def __cinit__(self, arch=libseccomp.SCMP_ARCH_NATIVE):
- """ Initialize the architecture object.
-@@ -198,6 +201,10 @@ cdef class Arch:
- self._token = libseccomp.SCMP_ARCH_MIPSEL64
- elif arch == libseccomp.SCMP_ARCH_MIPSEL64N32:
- self._token = libseccomp.SCMP_ARCH_MIPSEL64N32
-+ elif arch == libseccomp.SCMP_ARCH_PPC64:
-+ self._token = libseccomp.SCMP_ARCH_PPC64
-+ elif arch == libseccomp.SCMP_ARCH_PPC64LE:
-+ self._token = libseccomp.SCMP_ARCH_PPC64LE
- else:
- self._token = 0;
- elif isinstance(arch, basestring):
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0002-tests-install-python-tests-if-appropriate.patch b/recipes-security/libseccomp/files/0002-tests-install-python-tests-if-appropriate.patch
deleted file mode 100644
index 52ae751..0000000
--- a/recipes-security/libseccomp/files/0002-tests-install-python-tests-if-appropriate.patch
+++ /dev/null
@@ -1,61 +0,0 @@
-From 49dd92b85ca1797f2d289f48d3c1cdaec678334b Mon Sep 17 00:00:00 2001
-From: Joe MacDonald <joe at deserted.net>
-Date: Mon, 28 Oct 2013 15:40:15 -0400
-Subject: [PATCH 2/3] tests: install python tests if appropriate
-
-Install the python tests in addition to the C tests if python bindings are
-being built. The regression script can, and needs to, have the
-modification of the PYTHONPATH removed since it's unlikely in this
-scenario that the original source tree will be around at all anymore.
-This shouldn't be a problem since the library should be installed to the
-default PYTHONPATH anyway.
-
-Upstream-Status: Submitted [http://www.mail-archive.com/libseccomp-discuss@lists.sourceforge.net/msg00470.html]
-
-Signed-off-by: Joe MacDonald <joe at deserted.net>
----
- macros.mk | 3 ++-
- tests/Makefile | 6 +++++-
- 2 files changed, 7 insertions(+), 2 deletions(-)
-
-diff --git a/macros.mk b/macros.mk
-index e7c196d..13e7ed3 100644
---- a/macros.mk
-+++ b/macros.mk
-@@ -221,7 +221,8 @@ INSTALL_REGRESSION_TEST_MACRO += \
- $(INSTALL) -o $(INSTALL_OWNER) -g $(INSTALL_GROUP) \
- -d "$(INSTALL_TEST_DIR)"; \
- $(INSTALL) -o $(INSTALL_OWNER) -g $(INSTALL_GROUP) -m 0755 \
-- regression "$(INSTALL_TEST_DIR)";
-+ regression "$(INSTALL_TEST_DIR)"; \
-+ $(SED) -i "/\/..\/src\/python\/build\/lib\./d" "$(INSTALL_TEST_DIR)/regression";
-
- ifeq ($(V),0)
- INSTALL_MAN1_MACRO = \
-diff --git a/tests/Makefile b/tests/Makefile
-index 135551c..309a570 100644
---- a/tests/Makefile
-+++ b/tests/Makefile
-@@ -78,6 +78,10 @@ all: $(TESTS) $(OBJS)
-
- -include $(DEPS_TESTS) $(DEPS_OBJS)
-
-+ifeq ($(CONF_BINDINGS_PYTHON), 1)
-+ PY_TESTS = $(TESTS:%=%.py)
-+endif
-+
- $(DEPS_TESTS):
- $(MAKEDEP_EXEC)
- $(ADDDEP) $@ ../src/libseccomp.a
-@@ -92,7 +96,7 @@ $(TEST_PRIVATE): 00-test.c $(OBJS) ../src/libseccomp.a
- check: $(TESTS)
- ./regression
-
--install-tests: $(TESTS) $(TESTS:%=%.tests)
-+install-tests: $(TESTS) $(TESTS:%=%.tests) $(PY_TESTS)
- $(INSTALL_TEST_MACRO)
- $(INSTALL_REGRESSION_TEST_MACRO)
-
---
-1.7.10.4
-
diff --git a/recipes-security/libseccomp/files/0003-tests-introduce-alternate-test-report-format.patch b/recipes-security/libseccomp/files/0003-tests-introduce-alternate-test-report-format.patch
deleted file mode 100644
index cd4d6fb..0000000
--- a/recipes-security/libseccomp/files/0003-tests-introduce-alternate-test-report-format.patch
+++ /dev/null
@@ -1,124 +0,0 @@
-From 389604a4d7b445e429998599827195751238400a Mon Sep 17 00:00:00 2001
-From: Joe MacDonald <joe at deserted.net>
-Date: Mon, 28 Oct 2013 15:40:16 -0400
-Subject: [PATCH 3/3] tests: introduce alternate test report format
-
-Adding an alternate test report format to the regression script. The
-output format is modelled on the automake style described here:
-
- http://www.gnu.org/software/automake/manual/automake.html#Simple-Tests
-
-and is intended to support integrating the existing test scripts with the
-Yocto Project's ptest infrastructure:
-
- https://wiki.yoctoproject.org/wiki/Ptest#What_constitutes_a_ptest.3F
-
-Currently there was only one use of the existing "INFO" tag in test
-reporting, used in a way that better fit the "SKIP" model, so update that
-as well and adjust print_result to handle SKIP and INFO interchangeably so
-as to minimize the impact of this change on anyone not choosing to use the
-new report format.
-
-Upstream-Status: Submitted [http://www.mail-archive.com/libseccomp-discuss@lists.sourceforge.net/msg00470.html]
-
-Signed-off-by: Joe MacDonald <joe at deserted.net>
----
- tests/regression | 35 +++++++++++++++++++++++++++--------
- 1 file changed, 27 insertions(+), 8 deletions(-)
-
-diff --git a/tests/regression b/tests/regression
-index 3c293a4..a9315f7 100755
---- a/tests/regression
-+++ b/tests/regression
-@@ -71,7 +71,7 @@ function verify_deps() {
- function usage() {
- cat << EOF
- usage: regression [-h] [-v] [-m MODE] [-a] [-b BATCH_NAME] [-l <LOG>]
-- [-s SINGLE_TEST] [-t <TEMP_DIR>] [-T <TEST_TYPE>]
-+ [-p] [-s SINGLE_TEST] [-t <TEMP_DIR>] [-T <TEST_TYPE>]
-
- libseccomp regression test automation script
- optional arguments:
-@@ -80,6 +80,7 @@ optional arguments:
- -a specifies all tests are to be run
- -b BATCH_NAME specifies batch of tests to be run
- -l [LOG] specifies log file to write test results to
-+ -p use automake-style results output (ptest format)
- -s SINGLE_TEST specifies individual test number to be run
- -t [TEMP_DIR] specifies directory to create temporary files in
- -T [TEST_TYPE] only run tests matching the specified type
-@@ -127,17 +128,31 @@ function print_data() {
- #
- # Arguments:
- # 1 string containing generated test number
--# 2 string containing the test result (INFO, SUCCESS, ERROR, or FAILURE)
-+# 2 string containing the test result (SKIP, INFO, SUCCESS, ERROR, or FAILURE)
- # 3 string containing addition details
- #
- function print_result() {
-- if [[ $2 == "INFO" && -z $verbose ]]; then
-+ if [[ $2 == "INFO" || $2 == "SKIP" ]] && [[ -z $verbose ]]; then
- return
- fi
-- if [[ $3 == "" ]]; then
-- printf "Test %s result: %s\n" "$1" "$2" >&$logfd
-+ if [[ -n $ptest_report ]]; then
-+ case $2 in
-+ SUCCESS )
-+ printf "PASS: %s %s\n" "$1" "$3" >&$logfd
-+ ;;
-+ ERROR | FAILURE )
-+ printf "FAIL: %s %s\n" "$1" "$3" >&$logfd
-+ ;;
-+ SKIP )
-+ printf "SKIP: %s %s\n" "$1" "$3" >&$logfd
-+ ;;
-+ esac
- else
-- printf "Test %s result: %s %s\n" "$1" "$2" "$3" >&$logfd
-+ if [[ $3 == "" ]]; then
-+ printf "Test %s result: %s\n" "$1" "$2" >&$logfd
-+ else
-+ printf "Test %s result: %s %s\n" "$1" "$2" "$3" >&$logfd
-+ fi
- fi
- }
-
-@@ -358,7 +373,7 @@ function run_test_bpf_sim() {
- fi
- elif [[ "$testarch" != "all" ]] && [[ "$testarch" != "$arch" ]]; then
- # only run tests that match the current architecture
-- print_result $(generate_test_num "$1" $2 1) "INFO" \
-+ print_result $(generate_test_num "$1" $2 1) "SKIP" \
- "Test skipped due to test/system architecture difference"
- stats_skipped=$(($stats_skipped+1))
- return
-@@ -788,13 +803,14 @@ tmpfile=""
- tmpdir=""
- type=
- verbose=
-+ptest_report=
- stats_all=0
- stats_skipped=0
- stats_success=0
- stats_failure=0
- stats_error=0
-
--while getopts "ab:gl:m:s:t:T:vh" opt; do
-+while getopts "ab:gl:m:ps:t:T:vh" opt; do
- case $opt in
- a)
- runall=1
-@@ -820,6 +836,9 @@ while getopts "ab:gl:m:s:t:T:vh" opt; do
- exit 1
- esac
- ;;
-+ p)
-+ ptest_report=1
-+ ;;
- s)
- single_list[single_count]=$OPTARG
- single_count=$(($single_count+1))
---
-1.7.10.4
-
diff --git a/recipes-security/libseccomp/files/0003-tools-add-ppc64-support.patch b/recipes-security/libseccomp/files/0003-tools-add-ppc64-support.patch
deleted file mode 100644
index fa56192..0000000
--- a/recipes-security/libseccomp/files/0003-tools-add-ppc64-support.patch
+++ /dev/null
@@ -1,80 +0,0 @@
-From 21e74cf80be3d55fdfa5600bc99f284b19f75b01 Mon Sep 17 00:00:00 2001
-From: Paul Moore <pmoore at redhat.com>
-Date: Fri, 26 Sep 2014 12:50:40 -0400
-Subject: [PATCH 03/11] tools: add ppc64 support
-
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- tools/scmp_arch_detect.c | 6 ++++++
- tools/scmp_bpf_disasm.c | 4 ++++
- tools/scmp_bpf_sim.c | 4 ++++
- tools/util.c | 6 ++++++
- 4 files changed, 20 insertions(+)
-
-diff --git a/tools/scmp_arch_detect.c b/tools/scmp_arch_detect.c
-index 5a87252..d23d2ec 100644
---- a/tools/scmp_arch_detect.c
-+++ b/tools/scmp_arch_detect.c
-@@ -99,6 +99,12 @@ int main(int argc, char *argv[])
- case SCMP_ARCH_MIPSEL64N32:
- printf("mipsel64n32\n");
- break;
-+ case SCMP_ARCH_PPC64:
-+ printf("ppc64\n");
-+ break;
-+ case SCMP_ARCH_PPC64LE:
-+ printf("ppc64le\n");
-+ break;
- default:
- printf("unknown\n");
- }
-diff --git a/tools/scmp_bpf_disasm.c b/tools/scmp_bpf_disasm.c
-index 349b8a8..9199e17 100644
---- a/tools/scmp_bpf_disasm.c
-+++ b/tools/scmp_bpf_disasm.c
-@@ -334,6 +334,10 @@ int main(int argc, char *argv[])
- arch = AUDIT_ARCH_MIPS64N32;
- else if (strcmp(optarg, "mipsel64n32") == 0)
- arch = AUDIT_ARCH_MIPSEL64N32;
-+ else if (strcmp(optarg, "ppc64") == 0)
-+ arch = AUDIT_ARCH_PPC64;
-+ else if (strcmp(optarg, "ppc64le") == 0)
-+ arch = AUDIT_ARCH_PPC64LE;
- else
- exit_usage(argv[0]);
- break;
-diff --git a/tools/scmp_bpf_sim.c b/tools/scmp_bpf_sim.c
-index bb3a2e7..d3e439f 100644
---- a/tools/scmp_bpf_sim.c
-+++ b/tools/scmp_bpf_sim.c
-@@ -249,6 +249,10 @@ int main(int argc, char *argv[])
- arch = AUDIT_ARCH_MIPS64N32;
- else if (strcmp(optarg, "mipsel64n32") == 0)
- arch = AUDIT_ARCH_MIPSEL64N32;
-+ else if (strcmp(optarg, "ppc64") == 0)
-+ arch = AUDIT_ARCH_PPC64;
-+ else if (strcmp(optarg, "ppc64le") == 0)
-+ arch = AUDIT_ARCH_PPC64LE;
- else
- exit_fault(EINVAL);
- break;
-diff --git a/tools/util.c b/tools/util.c
-index 9b58bbb..f998009 100644
---- a/tools/util.c
-+++ b/tools/util.c
-@@ -62,6 +62,12 @@
- #elif __MIPSEL__
- #define ARCH_NATIVE AUDIT_ARCH_MIPSEL64N32
- #endif /* _MIPS_SIM_NABI32 */
-+#elif __PPC64__
-+#ifdef __BIG_ENDIAN__
-+#define ARCH_NATIVE AUDIT_ARCH_PPC64
-+#else
-+#define ARCH_NATIVE AUDIT_ARCH_PPC64LE
-+#endif
- #else
- #error the simulator code needs to know about your machine type
- #endif
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0004-tests-add-ppc64-support-to-the-regression-tests.patch b/recipes-security/libseccomp/files/0004-tests-add-ppc64-support-to-the-regression-tests.patch
deleted file mode 100644
index e1d4f41..0000000
--- a/recipes-security/libseccomp/files/0004-tests-add-ppc64-support-to-the-regression-tests.patch
+++ /dev/null
@@ -1,118 +0,0 @@
-From e7deb140a59c1ca3c4eed5967ba288464f077944 Mon Sep 17 00:00:00 2001
-From: Paul Moore <pmoore at redhat.com>
-Date: Fri, 26 Sep 2014 13:14:12 -0400
-Subject: [PATCH 04/11] tests: add ppc64 support to the regression tests
-
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- tests/16-sim-arch_basic.c | 3 +++
- tests/16-sim-arch_basic.py | 1 +
- tests/23-sim-arch_all_le_basic.c | 3 +++
- tests/23-sim-arch_all_le_basic.py | 1 +
- tests/26-sim-arch_all_be_basic.c | 3 +++
- tests/26-sim-arch_all_be_basic.py | 1 +
- tests/regression | 10 ++++++++--
- 7 files changed, 20 insertions(+), 2 deletions(-)
-
-diff --git a/tests/16-sim-arch_basic.c b/tests/16-sim-arch_basic.c
-index 9771913..09df44b 100644
---- a/tests/16-sim-arch_basic.c
-+++ b/tests/16-sim-arch_basic.c
-@@ -68,6 +68,9 @@ int main(int argc, char *argv[])
- rc = seccomp_arch_add(ctx, SCMP_ARCH_MIPSEL64N32);
- if (rc != 0)
- goto out;
-+ rc = seccomp_arch_add(ctx, SCMP_ARCH_PPC64LE);
-+ if (rc != 0)
-+ goto out;
-
- rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(read), 1,
- SCMP_A0(SCMP_CMP_EQ, STDIN_FILENO));
-diff --git a/tests/16-sim-arch_basic.py b/tests/16-sim-arch_basic.py
-index 57a5ac3..d9e1939 100755
---- a/tests/16-sim-arch_basic.py
-+++ b/tests/16-sim-arch_basic.py
-@@ -39,6 +39,7 @@ def test(args):
- f.add_arch(Arch("mipsel"))
- f.add_arch(Arch("mipsel64"))
- f.add_arch(Arch("mipsel64n32"))
-+ f.add_arch(Arch("ppc64le"))
- f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
-diff --git a/tests/23-sim-arch_all_le_basic.c b/tests/23-sim-arch_all_le_basic.c
-index eeb8556..9f67ed6 100644
---- a/tests/23-sim-arch_all_le_basic.c
-+++ b/tests/23-sim-arch_all_le_basic.c
-@@ -68,6 +68,9 @@ int main(int argc, char *argv[])
- rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("mipsel64n32"));
- if (rc != 0)
- goto out;
-+ rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("ppc64le"));
-+ if (rc != 0)
-+ goto out;
-
- rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(read), 1,
- SCMP_A0(SCMP_CMP_EQ, STDIN_FILENO));
-diff --git a/tests/23-sim-arch_all_le_basic.py b/tests/23-sim-arch_all_le_basic.py
-index 36ab139..212ff50 100755
---- a/tests/23-sim-arch_all_le_basic.py
-+++ b/tests/23-sim-arch_all_le_basic.py
-@@ -39,6 +39,7 @@ def test(args):
- f.add_arch(Arch("mipsel"))
- f.add_arch(Arch("mipsel64"))
- f.add_arch(Arch("mipsel64n32"))
-+ f.add_arch(Arch("ppc64le"))
- f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
-diff --git a/tests/26-sim-arch_all_be_basic.c b/tests/26-sim-arch_all_be_basic.c
-index a951b3c..1a44525 100644
---- a/tests/26-sim-arch_all_be_basic.c
-+++ b/tests/26-sim-arch_all_be_basic.c
-@@ -52,6 +52,9 @@ int main(int argc, char *argv[])
- rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("mips64n32"));
- if (rc != 0)
- goto out;
-+ rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("ppc64"));
-+ if (rc != 0)
-+ goto out;
-
- rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(read), 1,
- SCMP_A0(SCMP_CMP_EQ, STDIN_FILENO));
-diff --git a/tests/26-sim-arch_all_be_basic.py b/tests/26-sim-arch_all_be_basic.py
-index 1347406..cba2dea 100755
---- a/tests/26-sim-arch_all_be_basic.py
-+++ b/tests/26-sim-arch_all_be_basic.py
-@@ -33,6 +33,7 @@ def test(args):
- f.add_arch(Arch("mips"))
- f.add_arch(Arch("mips64"))
- f.add_arch(Arch("mips64n32"))
-+ f.add_arch(Arch("ppc64"))
- f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
-diff --git a/tests/regression b/tests/regression
-index 428bdf2..3ab6171 100755
---- a/tests/regression
-+++ b/tests/regression
-@@ -21,8 +21,14 @@
- # along with this library; if not, see <http://www.gnu.org/licenses>.
- #
-
--GLBL_ARCH_LE_SUPPORT="x86 x86_64 x32 arm aarch64 mipsel mipsel64 mipsel64n32"
--GLBL_ARCH_BE_SUPPORT="mips mips64 mips64n32"
-+GLBL_ARCH_LE_SUPPORT=" \
-+ x86 x86_64 x32 \
-+ arm aarch64 \
-+ mipsel mipsel64 mipsel64n32 \
-+ ppc64le"
-+GLBL_ARCH_BE_SUPPORT=" \
-+ mips mips64 mips64n32 \
-+ ppc64"
-
- GLBL_SYS_ARCH="../tools/scmp_arch_detect"
- GLBL_SYS_RESOLVER="../tools/scmp_sys_resolver"
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0005-tests-add-ppc64-support-to-the-regression-live-tests.patch b/recipes-security/libseccomp/files/0005-tests-add-ppc64-support-to-the-regression-live-tests.patch
deleted file mode 100644
index 915e000..0000000
--- a/recipes-security/libseccomp/files/0005-tests-add-ppc64-support-to-the-regression-live-tests.patch
+++ /dev/null
@@ -1,34 +0,0 @@
-From eb47c3f501ebbf9e3b218bb2432d5bdadc04dce1 Mon Sep 17 00:00:00 2001
-From: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Date: Tue, 10 Feb 2015 11:08:12 +0000
-Subject: [PATCH 05/11] tests: add ppc64 support to the regression live tests
-
-Otherwise The live tests will fail with
-
-"ERROR arch ppc64 not supported"
-
-Send against the working-ppc64 branch.
-
-Signed-off-by: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-[PM: added ppc64le]
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- tests/regression | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/tests/regression b/tests/regression
-index 3ab6171..eeb6cfb 100755
---- a/tests/regression
-+++ b/tests/regression
-@@ -673,7 +673,7 @@ function run_test_live() {
-
- # setup the arch specific return values
- case "$arch" in
-- x86|x86_64|x32|arm|aarch64)
-+ x86|x86_64|x32|arm|aarch64|ppc64|ppc64le)
- rc_kill=159
- rc_allow=160
- rc_trap=161
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0006-ppc64-correct-the-ppc64-syscall-table-and-validation.patch b/recipes-security/libseccomp/files/0006-ppc64-correct-the-ppc64-syscall-table-and-validation.patch
deleted file mode 100644
index d1903ff..0000000
--- a/recipes-security/libseccomp/files/0006-ppc64-correct-the-ppc64-syscall-table-and-validation.patch
+++ /dev/null
@@ -1,148 +0,0 @@
-From 75d3aa041dc3c8214610e44d317703c055e5e055 Mon Sep 17 00:00:00 2001
-From: Paul Moore <pmoore at redhat.com>
-Date: Tue, 10 Feb 2015 14:22:07 -0500
-Subject: [PATCH 06/11] ppc64: correct the ppc64 syscall table and validation
- script
-
-We didn't correctly take into account the __powerpc64__ define when
-generating the ppc64 syscall table. This patch also updates the
-syscall table to match Linux v3.19.
-
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- src/arch-ppc64-syscalls.c | 26 ++++++++++++++------------
- src/arch-syscall-validate | 2 +-
- 2 files changed, 15 insertions(+), 13 deletions(-)
-
-diff --git a/src/arch-ppc64-syscalls.c b/src/arch-ppc64-syscalls.c
-index 5dfb367..1c2a1df 100644
---- a/src/arch-ppc64-syscalls.c
-+++ b/src/arch-ppc64-syscalls.c
-@@ -27,7 +27,7 @@
- #include "arch.h"
- #include "arch-ppc64.h"
-
--/* NOTE: based on Linux 3.17-rc6+ */
-+/* NOTE: based on Linux 3.19 */
- const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "_llseek", 140 },
- { "_newselect", 142 },
-@@ -45,6 +45,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "arch_prctl", __PNR_arch_prctl },
- { "bdflush", 134 },
- { "bind", 327 },
-+ { "bpf", 361 },
- { "break", 17 },
- { "brk", 45 },
- { "cachectl", __PNR_cachectl },
-@@ -80,11 +81,12 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "eventfd", 307 },
- { "eventfd2", 314 },
- { "execve", 11 },
-+ { "execveat", 362 },
- { "exit", 1 },
- { "exit_group", 234 },
- { "faccessat", 298 },
- { "fadvise64", 233 },
-- { "fadvise64_64", 254 },
-+ { "fadvise64_64", __PNR_fadvise64_64 },
- { "fallocate", 309 },
- { "fanotify_init", 323 },
- { "fanotify_mark", 324 },
-@@ -95,7 +97,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "fchown32", __PNR_fchown32 },
- { "fchownat", 289 },
- { "fcntl", 55 },
-- { "fcntl64", 204 },
-+ { "fcntl64", __PNR_fcntl64 },
- { "fdatasync", 148 },
- { "fgetxattr", 214 },
- { "finit_module", 353 },
-@@ -105,14 +107,14 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "fremovexattr", 220 },
- { "fsetxattr", 211 },
- { "fstat", 108 },
-- { "fstat64", 197 },
-- { "fstatat64", 291 },
-+ { "fstat64", __PNR_fstat64 },
-+ { "fstatat64", __PNR_fstatat64 },
- { "fstatfs", 100 },
- { "fstatfs64", 253 },
- { "fsync", 118 },
- { "ftime", 35 },
- { "ftruncate", 93 },
-- { "ftruncate64", 194 },
-+ { "ftruncate64", __PNR_ftruncate64 },
- { "futex", 221 },
- { "futimesat", 290 },
- { "get_kernel_syms", 130 },
-@@ -191,7 +193,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "lseek", 19 },
- { "lsetxattr", 210 },
- { "lstat", 107 },
-- { "lstat64", 196 },
-+ { "lstat64", __PNR_lstat64 },
- { "madvise", 205 },
- { "mbind", 259 },
- { "memfd_create", 360 },
-@@ -204,7 +206,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "mlock", 150 },
- { "mlockall", 152 },
- { "mmap", 90 },
-- { "mmap2", 192 },
-+ { "mmap2", __PNR_mmap2 },
- { "modify_ldt", 123 },
- { "mount", 21 },
- { "move_pages", 301 },
-@@ -228,7 +230,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "munmap", 91 },
- { "name_to_handle_at", 345 },
- { "nanosleep", 162 },
-- { "newfstatat", __PNR_newfstatat },
-+ { "newfstatat", 291 },
- { "nfsservctl", 168 },
- { "nice", 34 },
- { "oldfstat", 28 },
-@@ -315,7 +317,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "semtimedop", __PNR_semtimedop },
- { "send", 334 },
- { "sendfile", 186 },
-- { "sendfile64", 226 },
-+ { "sendfile64", __PNR_sendfile64 },
- { "sendmmsg", 349 },
- { "sendmsg", 341 },
- { "sendto", 335 },
-@@ -375,7 +377,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "spu_run", 278 },
- { "ssetmask", 69 },
- { "stat", 106 },
-- { "stat64", 195 },
-+ { "stat64", __PNR_stat64 },
- { "statfs", 99 },
- { "statfs64", 252 },
- { "stime", 25 },
-@@ -411,7 +413,7 @@ const struct arch_syscall_def ppc64_syscall_table[] = { \
- { "times", 43 },
- { "tkill", 208 },
- { "truncate", 92 },
-- { "truncate64", 193 },
-+ { "truncate64", __PNR_truncate64 },
- { "tuxcall", 225 },
- { "ugetrlimit", 190 },
- { "ulimit", 58 },
-diff --git a/src/arch-syscall-validate b/src/arch-syscall-validate
-index eeb4d8b..e28b206 100755
---- a/src/arch-syscall-validate
-+++ b/src/arch-syscall-validate
-@@ -311,7 +311,7 @@ function dump_lib_mips64n32() {
- # Dump the architecture's syscall table to stdout.
- #
- function dump_sys_ppc64() {
-- gcc -E -dM $1/arch/powerpc/include/uapi/asm/unistd.h | \
-+ gcc -E -dM -D__powerpc64__ $1/arch/powerpc/include/uapi/asm/unistd.h | \
- grep "^#define __NR_" | sort | \
- sed -e 's/#define[ \t]\+__NR_\([a-z0-9_]\+\)[ \t]\+\([0-9]\+\)/\1\t\2/'
- }
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0007-tests-minor-fix-in-arch-syscall-check.patch b/recipes-security/libseccomp/files/0007-tests-minor-fix-in-arch-syscall-check.patch
deleted file mode 100644
index 060f8f7..0000000
--- a/recipes-security/libseccomp/files/0007-tests-minor-fix-in-arch-syscall-check.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-From 894784b321e088b5a10c2fdd442e7b326daedb7f Mon Sep 17 00:00:00 2001
-From: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Date: Wed, 11 Feb 2015 10:45:41 +0000
-Subject: [PATCH 07/11] tests: minor fix in arch-syscall-check
-
-Sent against working-ppc64.
-
-Signed-off-by: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- src/arch-syscall-check.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/arch-syscall-check.c b/src/arch-syscall-check.c
-index dadab0d..a091a6d 100644
---- a/src/arch-syscall-check.c
-+++ b/src/arch-syscall-check.c
-@@ -96,7 +96,7 @@ int main(int argc, char *argv[])
- syscall_check(str_miss, sys_name, "mips64n32",
- mips64n32_syscall_iterate_name(i_mips64n32));
- syscall_check(str_miss, sys_name, "ppc64",
-- ppc64_syscall_iterate_name(i_mips64n32));
-+ ppc64_syscall_iterate_name(i_ppc64));
-
- /* output the results */
- printf("%s: ", sys_name);
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0008-arch-add-a-ppc-syscall-table.patch b/recipes-security/libseccomp/files/0008-arch-add-a-ppc-syscall-table.patch
deleted file mode 100644
index 30fa449..0000000
--- a/recipes-security/libseccomp/files/0008-arch-add-a-ppc-syscall-table.patch
+++ /dev/null
@@ -1,782 +0,0 @@
-From 25fc85ba58eba3980649e5bded51816a98cbefc0 Mon Sep 17 00:00:00 2001
-From: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Date: Wed, 11 Feb 2015 13:23:25 +0000
-Subject: [PATCH 08/11] arch: add a ppc syscall table
-
-Signed-off-by: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-[PM: slight reordering of ppc/ppc64 in header files and makefiles]
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- include/seccomp.h.in | 1 +
- src/Makefile.am | 1 +
- src/arch-ppc-syscalls.c | 504 ++++++++++++++++++++++++++++++++++++++++++++++
- src/arch-ppc.c | 33 +++
- src/arch-ppc.h | 38 ++++
- src/arch-syscall-check.c | 13 +-
- src/arch-syscall-dump.c | 4 +
- src/arch-syscall-validate | 31 ++-
- 8 files changed, 623 insertions(+), 2 deletions(-)
- create mode 100644 src/arch-ppc-syscalls.c
- create mode 100644 src/arch-ppc.c
- create mode 100644 src/arch-ppc.h
-
-diff --git a/include/seccomp.h.in b/include/seccomp.h.in
-index 42f3f1a..3af4c2b 100644
---- a/include/seccomp.h.in
-+++ b/include/seccomp.h.in
-@@ -153,6 +153,7 @@ struct scmp_arg_cmp {
- /**
- * The PowerPC architecture tokens
- */
-+#define SCMP_ARCH_PPC AUDIT_ARCH_PPC
- #define SCMP_ARCH_PPC64 AUDIT_ARCH_PPC64
- #ifndef AUDIT_ARCH_PPC64LE
- #define AUDIT_ARCH_PPC64LE (EM_PPC64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
-diff --git a/src/Makefile.am b/src/Makefile.am
-index 038b2ef..54f8478 100644
---- a/src/Makefile.am
-+++ b/src/Makefile.am
-@@ -31,6 +31,7 @@ SOURCES_ARCH = \
- arch-mips.h arch-mips.c arch-mips-syscalls.c \
- arch-mips64.h arch-mips64.c arch-mips64-syscalls.c \
- arch-mips64n32.h arch-mips64n32.c arch-mips64n32-syscalls.c \
-+ arch-ppc.h arch-ppc.c arch-ppc-syscalls.c \
- arch-ppc64.h arch-ppc64.c arch-ppc64-syscalls.c
-
- SOURCES_GEN = \
-diff --git a/src/arch-ppc-syscalls.c b/src/arch-ppc-syscalls.c
-new file mode 100644
-index 0000000..32fc05a
---- /dev/null
-+++ b/src/arch-ppc-syscalls.c
-@@ -0,0 +1,504 @@
-+/**
-+ * Enhanced Seccomp PPC Specific Code
-+ *
-+ * Copyright (c) 2015 Freescale <bogdan.purcareata at freescale.com>
-+ * Author: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-+ *
-+ */
-+
-+/*
-+ * This library is free software; you can redistribute it and/or modify it
-+ * under the terms of version 2.1 of the GNU Lesser General Public License as
-+ * published by the Free Software Foundation.
-+ *
-+ * This library is distributed in the hope that it will be useful, but WITHOUT
-+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
-+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
-+ * for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public License
-+ * along with this library; if not, see <http://www.gnu.org/licenses>.
-+ */
-+
-+#include <string.h>
-+
-+#include <seccomp.h>
-+
-+#include "arch.h"
-+#include "arch-ppc.h"
-+
-+/* NOTE: based on Linux 3.19 */
-+const struct arch_syscall_def ppc_syscall_table[] = { \
-+ { "_llseek", 140 },
-+ { "_newselect", 142 },
-+ { "_sysctl", 149 },
-+ { "accept", 330 },
-+ { "accept4", 344 },
-+ { "access", 33 },
-+ { "acct", 51 },
-+ { "add_key", 269 },
-+ { "adjtimex", 124 },
-+ { "afs_syscall", 137 },
-+ { "alarm", 27 },
-+ { "arm_fadvise64_64", __PNR_arm_fadvise64_64 },
-+ { "arm_sync_file_range", __PNR_arm_sync_file_range },
-+ { "arch_prctl", __PNR_arch_prctl },
-+ { "bdflush", 134 },
-+ { "bind", 327 },
-+ { "bpf", 361 },
-+ { "break", 17 },
-+ { "brk", 45 },
-+ { "cachectl", __PNR_cachectl },
-+ { "cacheflush", __PNR_cacheflush },
-+ { "capget", 183 },
-+ { "capset", 184 },
-+ { "chdir", 12 },
-+ { "chmod", 15 },
-+ { "chown", 181 },
-+ { "chown32", __PNR_chown32 },
-+ { "chroot", 61 },
-+ { "clock_adjtime", 347 },
-+ { "clock_getres", 247 },
-+ { "clock_gettime", 246 },
-+ { "clock_nanosleep", 248 },
-+ { "clock_settime", 245 },
-+ { "clone", 120 },
-+ { "close", 6 },
-+ { "connect", 328 },
-+ { "creat", 8 },
-+ { "create_module", 127 },
-+ { "delete_module", 129 },
-+ { "dup", 41 },
-+ { "dup2", 63 },
-+ { "dup3", 316 },
-+ { "epoll_create", 236 },
-+ { "epoll_create1", 315 },
-+ { "epoll_ctl", 237 },
-+ { "epoll_ctl_old", __PNR_epoll_ctl_old },
-+ { "epoll_pwait", 303 },
-+ { "epoll_wait", 238 },
-+ { "epoll_wait_old", __PNR_epoll_wait_old },
-+ { "eventfd", 307 },
-+ { "eventfd2", 314 },
-+ { "execve", 11 },
-+ { "execveat", 362 },
-+ { "exit", 1 },
-+ { "exit_group", 234 },
-+ { "faccessat", 298 },
-+ { "fadvise64", 233 },
-+ { "fadvise64_64", 254 },
-+ { "fallocate", 309 },
-+ { "fanotify_init", 323 },
-+ { "fanotify_mark", 324 },
-+ { "fchdir", 133 },
-+ { "fchmod", 94 },
-+ { "fchmodat", 297 },
-+ { "fchown", 95 },
-+ { "fchown32", __PNR_fchown32 },
-+ { "fchownat", 289 },
-+ { "fcntl", 55 },
-+ { "fcntl64", 204 },
-+ { "fdatasync", 148 },
-+ { "fgetxattr", 214 },
-+ { "finit_module", 353 },
-+ { "flistxattr", 217 },
-+ { "flock", 143 },
-+ { "fork", 2 },
-+ { "fremovexattr", 220 },
-+ { "fsetxattr", 211 },
-+ { "fstat", 108 },
-+ { "fstat64", 197 },
-+ { "fstatat64", 291 },
-+ { "fstatfs", 100 },
-+ { "fstatfs64", 253 },
-+ { "fsync", 118 },
-+ { "ftime", 35 },
-+ { "ftruncate", 93 },
-+ { "ftruncate64", 194 },
-+ { "futex", 221 },
-+ { "futimesat", 290 },
-+ { "get_kernel_syms", 130 },
-+ { "get_mempolicy", 260 },
-+ { "get_robust_list", 299 },
-+ { "get_thread_area", __PNR_get_thread_area },
-+ { "getcpu", 302 },
-+ { "getcwd", 182 },
-+ { "getdents", 141 },
-+ { "getdents64", 202 },
-+ { "getegid", 50 },
-+ { "getegid32", __PNR_getegid32 },
-+ { "geteuid", 49 },
-+ { "geteuid32", __PNR_geteuid32 },
-+ { "getgid", 47 },
-+ { "getgid32", __PNR_getgid32 },
-+ { "getgroups", 80 },
-+ { "getgroups32", __PNR_getgroups32 },
-+ { "getitimer", 105 },
-+ { "getpeername", 332 },
-+ { "getpgid", 132 },
-+ { "getpgrp", 65 },
-+ { "getpid", 20 },
-+ { "getpmsg", 187 },
-+ { "getppid", 64 },
-+ { "getpriority", 96 },
-+ { "getrandom", 359 },
-+ { "getresgid", 170 },
-+ { "getresgid32", __PNR_getresgid32 },
-+ { "getresuid", 165 },
-+ { "getresuid32", __PNR_getresuid32 },
-+ { "getrlimit", 76 },
-+ { "getrusage", 77 },
-+ { "getsid", 147 },
-+ { "getsockname", 331 },
-+ { "getsockopt", 340 },
-+ { "gettid", 207 },
-+ { "gettimeofday", 78 },
-+ { "getuid", 24 },
-+ { "getuid32", __PNR_getuid32 },
-+ { "getxattr", 212 },
-+ { "gtty", 32 },
-+ { "idle", 112 },
-+ { "init_module", 128 },
-+ { "inotify_add_watch", 276 },
-+ { "inotify_init", 275 },
-+ { "inotify_init1", 318 },
-+ { "inotify_rm_watch", 277 },
-+ { "io_cancel", 231 },
-+ { "io_destroy", 228 },
-+ { "io_getevents", 229 },
-+ { "io_setup", 227 },
-+ { "io_submit", 230 },
-+ { "ioctl", 54 },
-+ { "ioperm", 101 },
-+ { "iopl", 110 },
-+ { "ioprio_get", 274 },
-+ { "ioprio_set", 273 },
-+ { "ipc", 117 },
-+ { "kcmp", 354 },
-+ { "kexec_file_load", __PNR_kexec_file_load },
-+ { "kexec_load", 268 },
-+ { "keyctl", 271 },
-+ { "kill", 37 },
-+ { "lchown", 16 },
-+ { "lchown32", __PNR_lchown32 },
-+ { "lgetxattr", 213 },
-+ { "link", 9 },
-+ { "linkat", 294 },
-+ { "listen", 329 },
-+ { "listxattr", 215 },
-+ { "llistxattr", 216 },
-+ { "lock", 53 },
-+ { "lookup_dcookie", 235 },
-+ { "lremovexattr", 219 },
-+ { "lseek", 19 },
-+ { "lsetxattr", 210 },
-+ { "lstat", 107 },
-+ { "lstat64", 196 },
-+ { "madvise", 205 },
-+ { "mbind", 259 },
-+ { "memfd_create", 360 },
-+ { "migrate_pages", 258 },
-+ { "mincore", 206 },
-+ { "mkdir", 39 },
-+ { "mkdirat", 287 },
-+ { "mknod", 14 },
-+ { "mknodat", 288 },
-+ { "mlock", 150 },
-+ { "mlockall", 152 },
-+ { "mmap", 90 },
-+ { "mmap2", 192 },
-+ { "modify_ldt", 123 },
-+ { "mount", 21 },
-+ { "move_pages", 301 },
-+ { "mprotect", 125 },
-+ { "mpx", 56 },
-+ { "mq_getsetattr", 267 },
-+ { "mq_notify", 266 },
-+ { "mq_open", 262 },
-+ { "mq_timedreceive", 265 },
-+ { "mq_timedsend", 264 },
-+ { "mq_unlink", 263 },
-+ { "mremap", 163 },
-+ { "msgctl", __PNR_msgctl },
-+ { "msgget", __PNR_msgget },
-+ { "msgrcv", __PNR_msgrcv },
-+ { "msgsnd", __PNR_msgsnd },
-+ { "msync", 144 },
-+ { "multiplexer", 201 },
-+ { "munlock", 151 },
-+ { "munlockall", 153 },
-+ { "munmap", 91 },
-+ { "name_to_handle_at", 345 },
-+ { "nanosleep", 162 },
-+ { "newfstatat", __PNR_newfstatat },
-+ { "nfsservctl", 168 },
-+ { "nice", 34 },
-+ { "oldfstat", 28 },
-+ { "oldlstat", 84 },
-+ { "oldolduname", 59 },
-+ { "oldstat", 18 },
-+ { "olduname", 109 },
-+ { "oldwait4", __PNR_oldwait4 },
-+ { "open", 5 },
-+ { "open_by_handle_at", 346 },
-+ { "openat", 286 },
-+ { "pause", 29 },
-+ { "pciconfig_iobase", 200 },
-+ { "pciconfig_read", 198 },
-+ { "pciconfig_write", 199 },
-+ { "perf_event_open", 319 },
-+ { "personality", 136 },
-+ { "pipe", 42 },
-+ { "pipe2", 317 },
-+ { "pivot_root", 203 },
-+ { "poll", 167 },
-+ { "ppoll", 281 },
-+ { "prctl", 171 },
-+ { "pread64", 179 },
-+ { "preadv", 320 },
-+ { "prlimit64", 325 },
-+ { "process_vm_readv", 351 },
-+ { "process_vm_writev", 352 },
-+ { "prof", 44 },
-+ { "profil", 98 },
-+ { "pselect6", 280 },
-+ { "ptrace", 26 },
-+ { "putpmsg", 188 },
-+ { "pwrite64", 180 },
-+ { "pwritev", 321 },
-+ { "query_module", 166 },
-+ { "quotactl", 131 },
-+ { "read", 3 },
-+ { "readahead", 191 },
-+ { "readdir", 89 },
-+ { "readlink", 85 },
-+ { "readlinkat", 296 },
-+ { "readv", 145 },
-+ { "reboot", 88 },
-+ { "recv", 336 },
-+ { "recvfrom", 337 },
-+ { "recvmmsg", 343 },
-+ { "recvmsg", 342 },
-+ { "remap_file_pages", 239 },
-+ { "removexattr", 218 },
-+ { "rename", 38 },
-+ { "renameat", 293 },
-+ { "renameat2", 357 },
-+ { "request_key", 270 },
-+ { "restart_syscall", 0 },
-+ { "rmdir", 40 },
-+ { "rt_sigaction", 173 },
-+ { "rt_sigpending", 175 },
-+ { "rt_sigprocmask", 174 },
-+ { "rt_sigqueueinfo", 177 },
-+ { "rt_sigreturn", 172 },
-+ { "rt_sigsuspend", 178 },
-+ { "rt_sigtimedwait", 176 },
-+ { "rt_tgsigqueueinfo", 322 },
-+ { "rtas", 255 },
-+ { "sched_get_priority_max", 159 },
-+ { "sched_get_priority_min", 160 },
-+ { "sched_getaffinity", 223 },
-+ { "sched_getattr", 356 },
-+ { "sched_getparam", 155 },
-+ { "sched_getscheduler", 157 },
-+ { "sched_rr_get_interval", 161 },
-+ { "sched_setaffinity", 222 },
-+ { "sched_setattr", 355 },
-+ { "sched_setparam", 154 },
-+ { "sched_setscheduler", 156 },
-+ { "sched_yield", 158 },
-+ { "seccomp", 358 },
-+ { "security", __PNR_security },
-+ { "select", 82 },
-+ { "semctl", __PNR_semctl },
-+ { "semget", __PNR_semget },
-+ { "semop", __PNR_semop },
-+ { "semtimedop", __PNR_semtimedop },
-+ { "send", 334 },
-+ { "sendfile", 186 },
-+ { "sendfile64", 226 },
-+ { "sendmmsg", 349 },
-+ { "sendmsg", 341 },
-+ { "sendto", 335 },
-+ { "set_mempolicy", 261 },
-+ { "set_robust_list", 300 },
-+ { "set_thread_area", __PNR_set_thread_area },
-+ { "set_tid_address", 232 },
-+ { "setdomainname", 121 },
-+ { "setfsgid", 139 },
-+ { "setfsgid32", __PNR_setfsgid32 },
-+ { "setfsuid", 138 },
-+ { "setfsuid32", __PNR_setfsuid32 },
-+ { "setgid", 46 },
-+ { "setgid32", __PNR_setgid32 },
-+ { "setgroups", 81 },
-+ { "setgroups32", __PNR_setgroups32 },
-+ { "sethostname", 74 },
-+ { "setitimer", 104 },
-+ { "setns", 350 },
-+ { "setpgid", 57 },
-+ { "setpriority", 97 },
-+ { "setregid", 71 },
-+ { "setregid32", __PNR_setregid32 },
-+ { "setresgid", 169 },
-+ { "setresgid32", __PNR_setresgid32 },
-+ { "setresuid", 164 },
-+ { "setresuid32", __PNR_setresuid32 },
-+ { "setreuid", 70 },
-+ { "setreuid32", __PNR_setreuid32 },
-+ { "setrlimit", 75 },
-+ { "setsid", 66 },
-+ { "setsockopt", 339 },
-+ { "settimeofday", 79 },
-+ { "setuid", 23 },
-+ { "setuid32", __PNR_setuid32 },
-+ { "setxattr", 209 },
-+ { "sgetmask", 68 },
-+ { "shmat", __PNR_shmat },
-+ { "shmctl", __PNR_shmctl },
-+ { "shmdt", __PNR_shmdt },
-+ { "shmget", __PNR_shmget },
-+ { "shutdown", 338 },
-+ { "sigaction", 67 },
-+ { "sigaltstack", 185 },
-+ { "signal", 48 },
-+ { "signalfd", 305 },
-+ { "signalfd4", 313 },
-+ { "sigpending", 73 },
-+ { "sigprocmask", 126 },
-+ { "sigreturn", 119 },
-+ { "sigsuspend", 72 },
-+ { "socket", 326 },
-+ { "socketcall", 102 },
-+ { "socketpair", 333 },
-+ { "splice", 283 },
-+ { "spu_create", 279 },
-+ { "spu_run", 278 },
-+ { "ssetmask", 69 },
-+ { "stat", 106 },
-+ { "stat64", 195 },
-+ { "statfs", 99 },
-+ { "statfs64", 252 },
-+ { "stime", 25 },
-+ { "stty", 31 },
-+ { "subpage_prot", 310 },
-+ { "swapcontext", 249 },
-+ { "swapoff", 115 },
-+ { "swapon", 87 },
-+ { "symlink", 83 },
-+ { "symlinkat", 295 },
-+ { "sync", 36 },
-+ { "sync_file_range", __PNR_sync_file_range },
-+ { "sync_file_range2", 308 },
-+ { "syncfs", 348 },
-+ { "syscall", __PNR_syscall },
-+ { "sys_debug_setcontext", 256 },
-+ { "sysfs", 135 },
-+ { "sysinfo", 116 },
-+ { "syslog", 103 },
-+ { "sysmips", __PNR_sysmips },
-+ { "tee", 284 },
-+ { "tgkill", 250 },
-+ { "time", 13 },
-+ { "timer_create", 240 },
-+ { "timer_delete", 244 },
-+ { "timer_getoverrun", 243 },
-+ { "timer_gettime", 242 },
-+ { "timer_settime", 241 },
-+ { "timerfd", __PNR_timerfd },
-+ { "timerfd_create", 306 },
-+ { "timerfd_gettime", 312 },
-+ { "timerfd_settime", 311 },
-+ { "times", 43 },
-+ { "tkill", 208 },
-+ { "truncate", 92 },
-+ { "truncate64", 193 },
-+ { "tuxcall", 225 },
-+ { "ugetrlimit", 190 },
-+ { "ulimit", 58 },
-+ { "umask", 60 },
-+ { "umount", 22 },
-+ { "umount2", 52 },
-+ { "uname", 122 },
-+ { "unlink", 10 },
-+ { "unlinkat", 292 },
-+ { "unshare", 282 },
-+ { "uselib", 86 },
-+ { "ustat", 62 },
-+ { "utime", 30 },
-+ { "utimensat", 304 },
-+ { "utimes", 251 },
-+ { "vfork", 189 },
-+ { "vhangup", 111 },
-+ { "vm86", 113 },
-+ { "vm86old", __PNR_vm86old },
-+ { "vmsplice", 285 },
-+ { "vserver", __PNR_vserver },
-+ { "wait4", 114 },
-+ { "waitid", 272 },
-+ { "waitpid", 7 },
-+ { "write", 4 },
-+ { "writev", 146 },
-+ { NULL, __NR_SCMP_ERROR },
-+};
-+
-+/**
-+ * Resolve a syscall name to a number
-+ * @param name the syscall name
-+ *
-+ * Resolve the given syscall name to the syscall number using the syscall table.
-+ * Returns the syscall number on success, including negative pseudo syscall
-+ * numbers; returns __NR_SCMP_ERROR on failure.
-+ *
-+ */
-+int ppc_syscall_resolve_name(const char *name)
-+{
-+ unsigned int iter;
-+ const struct arch_syscall_def *table = ppc_syscall_table;
-+
-+ /* XXX - plenty of room for future improvement here */
-+ for (iter = 0; table[iter].name != NULL; iter++) {
-+ if (strcmp(name, table[iter].name) == 0)
-+ return table[iter].num;
-+ }
-+
-+ return __NR_SCMP_ERROR;
-+}
-+
-+/**
-+ * Resolve a syscall number to a name
-+ * @param num the syscall number
-+ *
-+ * Resolve the given syscall number to the syscall name using the syscall table.
-+ * Returns a pointer to the syscall name string on success, including pseudo
-+ * syscall names; returns NULL on failure.
-+ *
-+ */
-+const char *ppc_syscall_resolve_num(int num)
-+{
-+ unsigned int iter;
-+ const struct arch_syscall_def *table = ppc_syscall_table;
-+
-+ /* XXX - plenty of room for future improvement here */
-+ for (iter = 0; table[iter].num != __NR_SCMP_ERROR; iter++) {
-+ if (num == table[iter].num)
-+ return table[iter].name;
-+ }
-+
-+ return NULL;
-+}
-+
-+/**
-+ * Iterate through the syscall table and return the syscall name
-+ * @param spot the offset into the syscall table
-+ *
-+ * Return the syscall name at position @spot or NULL on failure. This function
-+ * should only ever be used internally by libseccomp.
-+ *
-+ */
-+const char *ppc_syscall_iterate_name(unsigned int spot)
-+{
-+ /* XXX - no safety checks here */
-+ return ppc_syscall_table[spot].name;
-+}
-diff --git a/src/arch-ppc.c b/src/arch-ppc.c
-new file mode 100644
-index 0000000..56dbdb4
---- /dev/null
-+++ b/src/arch-ppc.c
-@@ -0,0 +1,33 @@
-+/**
-+ * Enhanced Seccomp PPC Specific Code
-+ *
-+ * Copyright (c) 2015 Freescale <bogdan.purcareata at freescale.com>
-+ * Author: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-+ *
-+ */
-+
-+/*
-+ * This library is free software; you can redistribute it and/or modify it
-+ * under the terms of version 2.1 of the GNU Lesser General Public License as
-+ * published by the Free Software Foundation.
-+ *
-+ * This library is distributed in the hope that it will be useful, but WITHOUT
-+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
-+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
-+ * for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public License
-+ * along with this library; if not, see <http://www.gnu.org/licenses>.
-+ */
-+
-+#include <linux/audit.h>
-+
-+#include "arch.h"
-+#include "arch-ppc.h"
-+
-+const struct arch_def arch_def_ppc = {
-+ .token = SCMP_ARCH_PPC,
-+ .token_bpf = AUDIT_ARCH_PPC,
-+ .size = ARCH_SIZE_32,
-+ .endian = ARCH_ENDIAN_BIG,
-+};
-diff --git a/src/arch-ppc.h b/src/arch-ppc.h
-new file mode 100644
-index 0000000..627a168
---- /dev/null
-+++ b/src/arch-ppc.h
-@@ -0,0 +1,38 @@
-+/**
-+ * Enhanced Seccomp PPC Specific Code
-+ *
-+ * Copyright (c) 2015 Freescale <bogdan.purcareata at freescale.com>
-+ * Author: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-+ *
-+ */
-+
-+/*
-+ * This library is free software; you can redistribute it and/or modify it
-+ * under the terms of version 2.1 of the GNU Lesser General Public License as
-+ * published by the Free Software Foundation.
-+ *
-+ * This library is distributed in the hope that it will be useful, but WITHOUT
-+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
-+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
-+ * for more details.
-+ *
-+ * You should have received a copy of the GNU Lesser General Public License
-+ * along with this library; if not, see <http://www.gnu.org/licenses>.
-+ */
-+
-+#ifndef _ARCH_PPC_H
-+#define _ARCH_PPC_H
-+
-+#include <inttypes.h>
-+
-+#include "arch.h"
-+#include "system.h"
-+
-+extern const struct arch_def arch_def_ppc;
-+
-+int ppc_syscall_resolve_name(const char *name);
-+const char *ppc_syscall_resolve_num(int num);
-+
-+const char *ppc_syscall_iterate_name(unsigned int spot);
-+
-+#endif
-diff --git a/src/arch-syscall-check.c b/src/arch-syscall-check.c
-index a091a6d..8682483 100644
---- a/src/arch-syscall-check.c
-+++ b/src/arch-syscall-check.c
-@@ -34,6 +34,7 @@
- #include "arch-mips64.h"
- #include "arch-mips64n32.h"
- #include "arch-ppc64.h"
-+#include "arch-ppc.h"
-
- /**
- * compare the syscall values
-@@ -69,6 +70,7 @@ int main(int argc, char *argv[])
- int i_mips64 = 0;
- int i_mips64n32 = 0;
- int i_ppc64 = 0;
-+ int i_ppc = 0;
- const char *sys_name;
- char str_miss[256];
-
-@@ -97,6 +99,8 @@ int main(int argc, char *argv[])
- mips64n32_syscall_iterate_name(i_mips64n32));
- syscall_check(str_miss, sys_name, "ppc64",
- ppc64_syscall_iterate_name(i_ppc64));
-+ syscall_check(str_miss, sys_name, "ppc",
-+ ppc_syscall_iterate_name(i_ppc));
-
- /* output the results */
- printf("%s: ", sys_name);
-@@ -125,10 +129,12 @@ int main(int argc, char *argv[])
- i_mips64n32 = -1;
- if (!ppc64_syscall_iterate_name(++i_ppc64))
- i_ppc64 = -1;
-+ if (!ppc_syscall_iterate_name(++i_ppc))
-+ i_ppc = -1;
- } while (i_x86_64 >= 0 && i_x32 >= 0 &&
- i_arm >= 0 && i_aarch64 >= 0 &&
- i_mips >= 0 && i_mips64 >= 0 && i_mips64n32 >= 0 &&
-- i_ppc64 >= 0);
-+ i_ppc64 >= 0 && i_ppc >= 0);
-
- /* check for any leftovers */
- sys_name = x86_syscall_iterate_name(i_x86 + 1);
-@@ -176,6 +182,11 @@ int main(int argc, char *argv[])
- ppc64_syscall_iterate_name(i_ppc64));
- return 1;
- }
-+ if (i_ppc >= 0) {
-+ printf("%s: ERROR, ppc has additional syscalls\n",
-+ ppc_syscall_iterate_name(i_ppc));
-+ return 1;
-+ }
-
- /* if we made it here, all is good */
- return 0;
-diff --git a/src/arch-syscall-dump.c b/src/arch-syscall-dump.c
-index 985a250..62992e7 100644
---- a/src/arch-syscall-dump.c
-+++ b/src/arch-syscall-dump.c
-@@ -39,6 +39,7 @@
- #include "arch-mips64n32.h"
- #include "arch-aarch64.h"
- #include "arch-ppc64.h"
-+#include "arch-ppc.h"
-
- /**
- * Print the usage information to stderr and exit
-@@ -116,6 +117,9 @@ int main(int argc, char *argv[])
- case SCMP_ARCH_PPC64:
- sys_name = ppc64_syscall_iterate_name(iter);
- break;
-+ case SCMP_ARCH_PPC:
-+ sys_name = ppc_syscall_iterate_name(iter);
-+ break;
-
- default:
- /* invalid arch */
-diff --git a/src/arch-syscall-validate b/src/arch-syscall-validate
-index e28b206..595dfef 100755
---- a/src/arch-syscall-validate
-+++ b/src/arch-syscall-validate
-@@ -326,6 +326,29 @@ function dump_lib_ppc64() {
- }
-
- #
-+# Dump the ppc system syscall table
-+#
-+# Arguments:
-+# 1 path to the kernel source
-+#
-+# Dump the architecture's syscall table to stdout.
-+#
-+function dump_sys_ppc() {
-+ gcc -E -dM $1/arch/powerpc/include/uapi/asm/unistd.h | \
-+ grep "^#define __NR_" | sort | \
-+ sed -e 's/#define[ \t]\+__NR_\([a-z0-9_]\+\)[ \t]\+\([0-9]\+\)/\1\t\2/'
-+}
-+
-+#
-+# Dump the ppc library syscall table
-+#
-+# Dump the library's syscall table to stdout.
-+#
-+function dump_lib_ppc() {
-+ $LIB_SYS_DUMP -a ppc | sed -e '/[^\t]\+\t-[0-9]\+/d'
-+}
-+
-+#
- # Dump the system syscall table
- #
- # Arguments:
-@@ -363,6 +386,9 @@ function dump_sys() {
- ppc64)
- dump_sys_ppc64 "$2"
- ;;
-+ ppc)
-+ dump_sys_ppc "$2"
-+ ;;
- *)
- echo ""
- ;;
-@@ -406,6 +432,9 @@ function dump_lib() {
- ppc64)
- dump_lib_ppc64 "$2"
- ;;
-+ ppc)
-+ dump_lib_ppc "$2"
-+ ;;
- *)
- echo ""
- ;;
-@@ -442,7 +471,7 @@ shift $(($OPTIND - 1))
-
- # defaults
- if [[ $arches == "" ]]; then
-- arches="x86 x86_64 x32 arm aarch64 mips mips64 mips64n32 ppc64"
-+ arches="x86 x86_64 x32 arm aarch64 mips mips64 mips64n32 ppc64 ppc"
- fi
-
- # sanity checks
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0009-arch-add-basic-initial-ppc-support-to-the-arch-depen.patch b/recipes-security/libseccomp/files/0009-arch-add-basic-initial-ppc-support-to-the-arch-depen.patch
deleted file mode 100644
index 5e97ec5..0000000
--- a/recipes-security/libseccomp/files/0009-arch-add-basic-initial-ppc-support-to-the-arch-depen.patch
+++ /dev/null
@@ -1,117 +0,0 @@
-From c0fa35a2756a1fcedcf4d4a14688226d2a1cd86b Mon Sep 17 00:00:00 2001
-From: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Date: Wed, 11 Feb 2015 13:23:26 +0000
-Subject: [PATCH 09/11] arch: add basic initial ppc support to the
- arch-dependent code
-
-Signed-off-by: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- src/arch.c | 11 +++++++++++
- src/python/libseccomp.pxd | 1 +
- src/python/seccomp.pyx | 6 +++++-
- 3 files changed, 17 insertions(+), 1 deletion(-)
-
-diff --git a/src/arch.c b/src/arch.c
-index 64fc1d1..f73db6b 100644
---- a/src/arch.c
-+++ b/src/arch.c
-@@ -39,6 +39,7 @@
- #include "arch-mips64.h"
- #include "arch-mips64n32.h"
- #include "arch-ppc64.h"
-+#include "arch-ppc.h"
- #include "system.h"
-
- #define default_arg_count_max 6
-@@ -81,6 +82,8 @@ const struct arch_def *arch_def_native = &arch_def_ppc64;
- #else
- const struct arch_def *arch_def_native = &arch_def_ppc64le;
- #endif
-+#elif __PPC__
-+const struct arch_def *arch_def_native = &arch_def_ppc;
- #else
- #error the arch code needs to know about your machine type
- #endif /* machine type guess */
-@@ -133,6 +136,8 @@ const struct arch_def *arch_def_lookup(uint32_t token)
- return &arch_def_ppc64;
- case SCMP_ARCH_PPC64LE:
- return &arch_def_ppc64le;
-+ case SCMP_ARCH_PPC:
-+ return &arch_def_ppc;
- }
-
- return NULL;
-@@ -173,6 +178,8 @@ const struct arch_def *arch_def_lookup_name(const char *arch_name)
- return &arch_def_ppc64;
- else if (strcmp(arch_name, "ppc64le") == 0)
- return &arch_def_ppc64le;
-+ else if (strcmp(arch_name, "ppc") == 0)
-+ return &arch_def_ppc;
-
- return NULL;
- }
-@@ -294,6 +301,8 @@ int arch_syscall_resolve_name(const struct arch_def *arch, const char *name)
- case SCMP_ARCH_PPC64:
- case SCMP_ARCH_PPC64LE:
- return ppc64_syscall_resolve_name(name);
-+ case SCMP_ARCH_PPC:
-+ return ppc_syscall_resolve_name(name);
- }
-
- return __NR_SCMP_ERROR;
-@@ -334,6 +343,8 @@ const char *arch_syscall_resolve_num(const struct arch_def *arch, int num)
- case SCMP_ARCH_PPC64:
- case SCMP_ARCH_PPC64LE:
- return ppc64_syscall_resolve_num(num);
-+ case SCMP_ARCH_PPC:
-+ return ppc_syscall_resolve_num(num);
- }
-
- return NULL;
-diff --git a/src/python/libseccomp.pxd b/src/python/libseccomp.pxd
-index a546550..e9c0f6a 100644
---- a/src/python/libseccomp.pxd
-+++ b/src/python/libseccomp.pxd
-@@ -40,6 +40,7 @@ cdef extern from "seccomp.h":
- SCMP_ARCH_MIPSEL64N32
- SCMP_ARCH_PPC64
- SCMP_ARCH_PPC64LE
-+ SCMP_ARCH_PPC
-
- cdef enum scmp_filter_attr:
- SCMP_FLTATR_ACT_DEFAULT
-diff --git a/src/python/seccomp.pyx b/src/python/seccomp.pyx
-index f30a0b6..2da8c66 100644
---- a/src/python/seccomp.pyx
-+++ b/src/python/seccomp.pyx
-@@ -148,6 +148,7 @@ cdef class Arch:
- MIPSEL64 - MIPS little endian 64-bit ABI
- MIPSEL64N32 - MIPS little endian N32 ABI
- PPC64 - 64-bit PowerPC
-+ PPC - 32-bit PowerPC
- """
-
- cdef int _token
-@@ -165,7 +166,8 @@ cdef class Arch:
- MIPSEL64 = libseccomp.SCMP_ARCH_MIPSEL64
- MIPSEL64N32 = libseccomp.SCMP_ARCH_MIPSEL64N32
- PPC64 = libseccomp.SCMP_ARCH_PPC64
-- PPC64 = libseccomp.SCMP_ARCH_PPC64LE
-+ PPC64LE = libseccomp.SCMP_ARCH_PPC64LE
-+ PPC = libseccomp.SCMP_ARCH_PPC
-
- def __cinit__(self, arch=libseccomp.SCMP_ARCH_NATIVE):
- """ Initialize the architecture object.
-@@ -205,6 +207,8 @@ cdef class Arch:
- self._token = libseccomp.SCMP_ARCH_PPC64
- elif arch == libseccomp.SCMP_ARCH_PPC64LE:
- self._token = libseccomp.SCMP_ARCH_PPC64LE
-+ elif arch == libseccomp.SCMP_ARCH_PPC:
-+ self._token = libseccomp.SCMP_ARCH_PPC
- else:
- self._token = 0;
- elif isinstance(arch, basestring):
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0010-tools-add-ppc-support.patch b/recipes-security/libseccomp/files/0010-tools-add-ppc-support.patch
deleted file mode 100644
index 30d7681..0000000
--- a/recipes-security/libseccomp/files/0010-tools-add-ppc-support.patch
+++ /dev/null
@@ -1,70 +0,0 @@
-From b54dafd62376f9041b4d48e800f39c588554aabc Mon Sep 17 00:00:00 2001
-From: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Date: Wed, 11 Feb 2015 13:23:27 +0000
-Subject: [PATCH 10/11] tools: add ppc support
-
-Signed-off-by: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- tools/scmp_arch_detect.c | 3 +++
- tools/scmp_bpf_disasm.c | 2 ++
- tools/scmp_bpf_sim.c | 2 ++
- tools/util.c | 2 ++
- 4 files changed, 9 insertions(+)
-
-diff --git a/tools/scmp_arch_detect.c b/tools/scmp_arch_detect.c
-index d23d2ec..03644c6 100644
---- a/tools/scmp_arch_detect.c
-+++ b/tools/scmp_arch_detect.c
-@@ -105,6 +105,9 @@ int main(int argc, char *argv[])
- case SCMP_ARCH_PPC64LE:
- printf("ppc64le\n");
- break;
-+ case SCMP_ARCH_PPC:
-+ printf("ppc\n");
-+ break;
- default:
- printf("unknown\n");
- }
-diff --git a/tools/scmp_bpf_disasm.c b/tools/scmp_bpf_disasm.c
-index 9199e17..d773469 100644
---- a/tools/scmp_bpf_disasm.c
-+++ b/tools/scmp_bpf_disasm.c
-@@ -338,6 +338,8 @@ int main(int argc, char *argv[])
- arch = AUDIT_ARCH_PPC64;
- else if (strcmp(optarg, "ppc64le") == 0)
- arch = AUDIT_ARCH_PPC64LE;
-+ else if (strcmp(optarg, "ppc") == 0)
-+ arch = AUDIT_ARCH_PPC;
- else
- exit_usage(argv[0]);
- break;
-diff --git a/tools/scmp_bpf_sim.c b/tools/scmp_bpf_sim.c
-index d3e439f..a53b4fd 100644
---- a/tools/scmp_bpf_sim.c
-+++ b/tools/scmp_bpf_sim.c
-@@ -253,6 +253,8 @@ int main(int argc, char *argv[])
- arch = AUDIT_ARCH_PPC64;
- else if (strcmp(optarg, "ppc64le") == 0)
- arch = AUDIT_ARCH_PPC64LE;
-+ else if (strcmp(optarg, "ppc") == 0)
-+ arch = AUDIT_ARCH_PPC;
- else
- exit_fault(EINVAL);
- break;
-diff --git a/tools/util.c b/tools/util.c
-index f998009..b45de3b 100644
---- a/tools/util.c
-+++ b/tools/util.c
-@@ -68,6 +68,8 @@
- #else
- #define ARCH_NATIVE AUDIT_ARCH_PPC64LE
- #endif
-+#elif __PPC__
-+#define ARCH_NATIVE AUDIT_ARCH_PPC
- #else
- #error the simulator code needs to know about your machine type
- #endif
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/0011-tests-add-ppc-support-to-the-regression-tests.patch b/recipes-security/libseccomp/files/0011-tests-add-ppc-support-to-the-regression-tests.patch
deleted file mode 100644
index 3d02c23..0000000
--- a/recipes-security/libseccomp/files/0011-tests-add-ppc-support-to-the-regression-tests.patch
+++ /dev/null
@@ -1,64 +0,0 @@
-From 1a68b28e8cc6680dc7a9aecd26e06112b4ff93bf Mon Sep 17 00:00:00 2001
-From: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Date: Wed, 11 Feb 2015 13:23:28 +0000
-Subject: [PATCH 11/11] tests: add ppc support to the regression tests
-
-Signed-off-by: Bogdan Purcareata <bogdan.purcareata at freescale.com>
-Signed-off-by: Paul Moore <pmoore at redhat.com>
----
- tests/26-sim-arch_all_be_basic.c | 3 +++
- tests/26-sim-arch_all_be_basic.py | 1 +
- tests/regression | 4 ++--
- 3 files changed, 6 insertions(+), 2 deletions(-)
-
-diff --git a/tests/26-sim-arch_all_be_basic.c b/tests/26-sim-arch_all_be_basic.c
-index 1a44525..91fcbea 100644
---- a/tests/26-sim-arch_all_be_basic.c
-+++ b/tests/26-sim-arch_all_be_basic.c
-@@ -55,6 +55,9 @@ int main(int argc, char *argv[])
- rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("ppc64"));
- if (rc != 0)
- goto out;
-+ rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("ppc"));
-+ if (rc != 0)
-+ goto out;
-
- rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(read), 1,
- SCMP_A0(SCMP_CMP_EQ, STDIN_FILENO));
-diff --git a/tests/26-sim-arch_all_be_basic.py b/tests/26-sim-arch_all_be_basic.py
-index cba2dea..1537013 100755
---- a/tests/26-sim-arch_all_be_basic.py
-+++ b/tests/26-sim-arch_all_be_basic.py
-@@ -34,6 +34,7 @@ def test(args):
- f.add_arch(Arch("mips64"))
- f.add_arch(Arch("mips64n32"))
- f.add_arch(Arch("ppc64"))
-+ f.add_arch(Arch("ppc"))
- f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
- f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
-diff --git a/tests/regression b/tests/regression
-index eeb6cfb..9f0c17e 100755
---- a/tests/regression
-+++ b/tests/regression
-@@ -28,7 +28,7 @@ GLBL_ARCH_LE_SUPPORT=" \
- ppc64le"
- GLBL_ARCH_BE_SUPPORT=" \
- mips mips64 mips64n32 \
-- ppc64"
-+ ppc64 ppc"
-
- GLBL_SYS_ARCH="../tools/scmp_arch_detect"
- GLBL_SYS_RESOLVER="../tools/scmp_sys_resolver"
-@@ -673,7 +673,7 @@ function run_test_live() {
-
- # setup the arch specific return values
- case "$arch" in
-- x86|x86_64|x32|arm|aarch64|ppc64|ppc64le)
-+ x86|x86_64|x32|arm|aarch64|ppc64|ppc64le|ppc)
- rc_kill=159
- rc_allow=160
- rc_trap=161
---
-2.3.5
-
diff --git a/recipes-security/libseccomp/files/compiler.patch b/recipes-security/libseccomp/files/compiler.patch
deleted file mode 100644
index c7f2fbb..0000000
--- a/recipes-security/libseccomp/files/compiler.patch
+++ /dev/null
@@ -1,32 +0,0 @@
-From fb3e84f6212333949ee3e410bb468bb06c289a1e Mon Sep 17 00:00:00 2001
-From: Andrei Dinu <andrei.adrianx.dinu at intel.com>
-Date: Fri, 28 Jun 2013 15:55:13 +0300
-Subject: [PATCH] libseccomp always used host compiler
-
-passing $CC at do_install() doesn't seem to have
-effect on the compiler used by libseccomp. Modified
-the compiler manually.
-
-Upstream Status: Inapropriate
-
-Signed-off-by: Andrei Dinu <andrei.adrianx.dinu at intel.com>
----
- macros.mk | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/macros.mk b/macros.mk
-index 9c62fa7..e219be6 100644
---- a/macros.mk
-+++ b/macros.mk
-@@ -66,7 +66,7 @@ AWK ?= awk
- PYTHON ?= /usr/bin/env python
-
- # we require gcc specific functionality
--GCC ?= gcc
-+GCC ?= $(CC)
-
- INSTALL ?= install
-
---
-1.7.9.5
-
diff --git a/recipes-security/libseccomp/files/regresion_fixup_seq_usage.patch b/recipes-security/libseccomp/files/regresion_fixup_seq_usage.patch
deleted file mode 100644
index 7832ff8..0000000
--- a/recipes-security/libseccomp/files/regresion_fixup_seq_usage.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-Index: git/tests/regression
-===================================================================
---- git.orig/tests/regression
-+++ git/tests/regression
-@@ -468,13 +468,13 @@ function run_test_bpf_sim() {
- # and arg ranges and generate/run every combination of requested
- # tests; if no ranges were specifed, then the single test is
- # run
-- for sys in $(seq -f "%1.0f" $low_syscall $high_syscall); do
-- for arg0 in $(seq -f "%1.0f" ${low_arg[0]} ${high_arg[0]}); do
-- for arg1 in $(seq -f "%1.0f" ${low_arg[1]} ${high_arg[1]}); do
-- for arg2 in $(seq -f "%1.0f" ${low_arg[2]} ${high_arg[2]}); do
-- for arg3 in $(seq -f "%1.0f" ${low_arg[3]} ${high_arg[3]}); do
-- for arg4 in $(seq -f "%1.0f" ${low_arg[4]} ${high_arg[4]}); do
-- for arg5 in $(seq -f "%1.0f" ${low_arg[5]} ${high_arg[5]}); do
-+ for sys in $(seq $low_syscall $high_syscall); do
-+ for arg0 in $(seq ${low_arg[0]} ${high_arg[0]}); do
-+ for arg1 in $(seq ${low_arg[1]} ${high_arg[1]}); do
-+ for arg2 in $(seq ${low_arg[2]} ${high_arg[2]}); do
-+ for arg3 in $(seq ${low_arg[3]} ${high_arg[3]}); do
-+ for arg4 in $(seq ${low_arg[4]} ${high_arg[4]}); do
-+ for arg5 in $(seq ${low_arg[5]} ${high_arg[5]}); do
- local -a arg=($arg0 $arg1 $arg2 $arg3 $arg4 $arg5)
-
- # Get the generated sub-test num string
diff --git a/recipes-security/libseccomp/libseccomp.bb b/recipes-security/libseccomp/libseccomp.bb
index b197fca..c131bea 100644
--- a/recipes-security/libseccomp/libseccomp.bb
+++ b/recipes-security/libseccomp/libseccomp.bb
@@ -4,12 +4,11 @@ SECTION = "security"
LICENSE = "LGPL-2.1"
LIC_FILES_CHKSUM = "file://LICENSE;beginline=0;endline=1;md5=8eac08d22113880357ceb8e7c37f989f"
-SRCREV = "7f3ae6e6a12390bd38f0787b242f60c47ad076c3"
+SRCREV = "937e774d8ccfd063a601f49ef46769de3926b62d"
-PV = "2.2.3+git${SRCPV}"
+PV = "2.3.1+git${SRCPV}"
-SRC_URI = "git://github.com/seccomp/libseccomp.git \
- "
+SRC_URI = "git://github.com/seccomp/libseccomp.git"
S = "${WORKDIR}/git"
--
2.9.2
More information about the yocto
mailing list