From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Cc: Adolf Belka <adolf.belka@ipfire.org>
Subject: [PATCH] libseccomp: Update to version 2.6.0
Date: Tue, 18 Mar 2025 22:20:15 +0100 [thread overview]
Message-ID: <20250318212018.3324141-12-adolf.belka@ipfire.org> (raw)
In-Reply-To: <20250318212018.3324141-1-adolf.belka@ipfire.org>
- Update from version 2.5.5 to 2.6.0
- Update of rootfile
- Changelog
2.6.0
- Update the syscall table for Linux v6.13
- Add support for new arches: SuperH little and big endian, LoongArch, and
32-bit Motorola 68000
- Add multiplexed syscall support for more arches: MIPS, SuperH, and PPC
- Consolidate and simplify handling of multiplexed syscalls
- Add support for the SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV flag
- Add support for transactions with the seccomp_transaction_start(),
seccomp_transaction_commit(), and seccomp_transaction_reject() APIs
- Add a seccomp_precompute() API to generate the seccomp BPF filter prior to
seccomp_load() or seccomp_export_bpf_mem()
- Add support for binary tree filters without syscalls
- Add support for the kernel’s implementation change of
SECCOMP_IOCTL_NOTIF_ID_VALID
- Add Python binding support for retrieving the notification file descriptor
- Improved tooling to help track syscall table updates in the Linux kernel
- Handle EINVAL error from the kernel when the WAIT_KILLABLE_RECV flag is
erroneously provided to the kernel
- Fix a seccomp userspace notification issue where the file descriptor was
being requested more than once
- Fix a bug where the internal filter state could be corrupted when a filter
rule addition fails
- Fix potential memory leak in the internal management of filter snapshots
- Utilize Cython rather than distutils in the Python bindings, due to
distutils’ deprecation
- Many test and CI improvements and fixes
- Many documentation improvements and updates
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/packages/libseccomp | 4 +++-
lfs/libseccomp | 13 ++++++-------
2 files changed, 9 insertions(+), 8 deletions(-)
diff --git a/config/rootfiles/packages/libseccomp b/config/rootfiles/packages/libseccomp
index f1bc3961f..a936edefc 100644
--- a/config/rootfiles/packages/libseccomp
+++ b/config/rootfiles/packages/libseccomp
@@ -4,7 +4,7 @@ usr/bin/scmp_sys_resolver
#usr/lib/libseccomp.la
#usr/lib/libseccomp.so
usr/lib/libseccomp.so.2
-usr/lib/libseccomp.so.2.5.5
+usr/lib/libseccomp.so.2.6.0
#usr/lib/pkgconfig/libseccomp.pc
#usr/share/man/man1/scmp_sys_resolver.1
#usr/share/man/man3/seccomp_api_get.3
@@ -17,6 +17,7 @@ usr/lib/libseccomp.so.2.5.5
#usr/share/man/man3/seccomp_attr_get.3
#usr/share/man/man3/seccomp_attr_set.3
#usr/share/man/man3/seccomp_export_bpf.3
+#usr/share/man/man3/seccomp_export_bpf_mem.3
#usr/share/man/man3/seccomp_export_pfc.3
#usr/share/man/man3/seccomp_init.3
#usr/share/man/man3/seccomp_load.3
@@ -27,6 +28,7 @@ usr/lib/libseccomp.so.2.5.5
#usr/share/man/man3/seccomp_notify_id_valid.3
#usr/share/man/man3/seccomp_notify_receive.3
#usr/share/man/man3/seccomp_notify_respond.3
+#usr/share/man/man3/seccomp_precompute.3
#usr/share/man/man3/seccomp_release.3
#usr/share/man/man3/seccomp_reset.3
#usr/share/man/man3/seccomp_rule_add.3
diff --git a/lfs/libseccomp b/lfs/libseccomp
index fa65f2259..436918323 100644
--- a/lfs/libseccomp
+++ b/lfs/libseccomp
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2023 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = A Seccomp (mode 2) helper library
-VER = 2.5.5
+VER = 2.6.0
THISAPP = libseccomp-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = libseccomp
-PAK_VER = 10
+PAK_VER = 11
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = d770cee1f3e02fbbcd9f25655b360ab38160ad800e2829a67f2b9da62b095a90be99ac851a67344cf95bd6810a6268da4655dc1d37d996e58239c4999eb41998
+$(DL_FILE)_BLAKE2 = 45c4f4dd67db5848bb536613e8929633f95cfbeb8738525381a76631187e7b0fc2c02f1a103579cd0f4135e9c175250fe2d784b85cc85424ec3125b4dafcf11c
install : $(TARGET)
@@ -82,9 +82,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar vxf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --disable-static
-
+ --prefix=/usr \
+ --disable-static
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
--
2.49.0
next prev parent reply other threads:[~2025-03-18 21:20 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-03-18 21:20 [PATCH] ca-certificates: Update to 20250317 Adolf Belka
2025-03-18 21:20 ` [PATCH] cairo: Update to version 1.18.4 Adolf Belka
2025-03-18 21:20 ` [PATCH] dbus: Update to version 1.16.2 Adolf Belka
2025-03-18 21:20 ` [PATCH] gettext: Update to version 0.24 Adolf Belka
2025-03-18 21:20 ` [PATCH] git: Update to version 2.49.0 Adolf Belka
2025-03-18 21:20 ` [PATCH] harfbuzz: Update to version 10.4.0 Adolf Belka
2025-03-18 21:20 ` [PATCH] hwdata: Update to version 0.393 Adolf Belka
2025-03-18 21:20 ` [PATCH] iana-etc: Update to version 20250311 Adolf Belka
2025-03-18 21:20 ` [PATCH] kmod: Update to version 34.1 Adolf Belka
2025-03-18 21:20 ` [PATCH] libcap: Update to version 2.75 Adolf Belka
2025-03-18 21:20 ` [PATCH] libedit: Update to version 20250104-3.1 Adolf Belka
2025-03-18 21:20 ` Adolf Belka [this message]
2025-03-18 21:20 ` [PATCH] liburcu: Update to version 0.15.1 Adolf Belka
2025-03-18 21:20 ` [PATCH] lvm2: Update to version 2.03.31 Adolf Belka
2025-03-18 21:20 ` [PATCH] pango: Update to version 1.56.3 Adolf Belka
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250318212018.3324141-12-adolf.belka@ipfire.org \
--to=adolf.belka@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox