From nobody Mon Sep 28 11:39:59 2026 Received: from mail-ej1-f42.google.com (mail-ej1-f42.google.com [209.85.218.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 11E5A3749E1 for ; Sat, 22 Aug 2026 07:23:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.218.42 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787383415; cv=none; b=G+YZqBM4aZyf2XOCBr6LVIkOrXCkl4t6jLHycZs9vd6FwlHn580fBkEIlcK8QafficK/f5lIgFaVhp2mYF7zbTXkHMdfUo5TcZyVEUBw3Eroob4e5npF+wECY1Etj7BEi+Jcr2VxuQ64vDoQHoJGV203WcnB07RB+C/Q6KbND7s= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787383415; c=relaxed/simple; bh=RWNYz384e4rKemzcuA5opb+syrbmhY7THbxYU3MsYLY=; h=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References: MIME-Version; b=ocxKQCAMtZCyytNSRrX/y7SjGMJVmOMgC6+HRe9MAixXXzsdifwATXpRTpabXvhQ6iwdhfYsRjiiloy94PKcgsIrA0mwea92URny6bvyPRKjZMrUEmpaghKfdQ/AsQu6Ns8n7dClt+jU+ktQ8zwpm6wlr/2lHHXKK/6Xx/HgeY0= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=ktIK5t4/; arc=none smtp.client-ip=209.85.218.42 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="ktIK5t4/" Received: by mail-ej1-f42.google.com with SMTP id a640c23a62f3a-c1c52d920b8so253047766b.2 for ; Sat, 22 Aug 2026 00:23:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787383412; x=1787988212; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=2FueEl+ZcII/8wuXmKky1Fcrh7O6MxQGPP0G/0IKJwg=; b=ktIK5t4/DBb6lCHQrH95SfNnoXE0Olq/qs9qjRKup8OaOL+VshSBaBGKEVWZC58tQf 9PFPOtcRugZxLZC88HBhLaY/K0V+xw59svyhfsoqrd7duaTcBCUHkYdrxNDropwRzFij EH24+OYzA0j1qHuIehSNE1G7d61FwiWAINASe3POoCsV8V9mi7piXwAwJisUgaYfjDRc UOKLbhHAC3ifK8wEJrjAY9JH7ZyinnsWRcFFF5jR4LEeVvKs82QgGmEvdm82D4FptAJh MfxMtJQzspu+L7GX5AI4bbRgQdY0oiQ+5f4squBGerRIwKQWVytMSuajcTi27mA3ILTi qZPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787383412; x=1787988212; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=2FueEl+ZcII/8wuXmKky1Fcrh7O6MxQGPP0G/0IKJwg=; b=VW2jSLuPvKbawL0fXTCttXTZid1L2V7ol7+Wx74c9Ru0FoxRWcmnbp0w2gymljYFK7 JEUn9SbGr8m7xbltYSXnmo8Rl8KSj2NYkhwy7jCh1mLDO6rmJQHhvMntwbCMp1yJb/GN yoonWFfK7bwFIkPUYPq+D8NKV/vorag3MzWf7Utcu1uH26fYjk6VbxQgHpDG41an8ZfH 3fFXu8G/Pp0iPH0Ry5aBg7uh5i4LJAFMNZhjt3VZKGh2IwJtxqtrzFgLmkC1oOVJZWMR o55vjqnkHPD0XvT2sJOAjhFC6xeXV9/WetvZIRiTgG0AzipfZv9UhXC7VFJqbGbO66Ds hARg== X-Forwarded-Encrypted: i=1; AHgh+RraFNJmq4avGqQjRqAFkcx+wgSt88X0IT4Sb3N/90VbXvOyU2udG92sgEAyH78HgCe40tsH3Qs/54HLUJs=@vger.kernel.org X-Gm-Message-State: AFuF++luKcEw5tHSlV+81rVrVAb4ra1wkVduUNuqfVGqHtjOcgumeA/Y vflAOOw1KJYCRZ1+Cv+9e4O1XanJ8iNiLdQLYUToMflDdIrdpuKGoUJo X-Gm-Gg: AR+sD10i5Ju2JNPbpGfLAIT7oKjlIFqCpOnnZ08E/UKXn5VwmiD/vVT+hct1JNBBXqg qqyJOqyvTTHTpahlOQTv1eK13qy7v0ekA24rALDxX3b3QlpXcCmVH0zMC7wnT6HPYk4G2sJZihK l89wCjHRuxpERbe5uKZpawm2c9i+0p2SqRXHzvTjI0o1EAutvFJUbHlVYkD7kche9oKQqi+1SbE kmEI+NFwRQQGd5hhot23rlSuz3ONM3diQrkaE+RTeemr51vZ79xGuL0L0IVoUrWhQLX8/3St/M9 tv/db7z8IkZP+eYTo737Srgv2SYXx7XJCG/TXs0k6xoz8TE8VS5nLIUeeWtUNoN/9n6HPp4qNO1 8JKgsjRXgdjrhcbGkkpI4lZ5wUqQJU+OSr6TXhZ253jaBt7M4HrqERH4uvsuSqgX6gZjP3sEGhB gVQvcefu6o1xqVrAmR2AOCAnQSCiIsv8W+UcK2wMoSDwedORhr0UCnW7L0FumNtncXYXMspaDrx W3BQDRKsqVg0r1JbaAa9L8h4EhQ6ApNhT1nGdB91Or5Vpl4FmotCUKo6QlcNC0bZnvVc7faiaKB yO2/wDLtnD6KqhqckpQfyfcujVQzo4E5UyvirvqLo3oANlrE1DvXSUjpf5JOzTIa4MloqI47jA= = X-Received: by 2002:a17:906:ba97:b0:c12:9b98:209e with SMTP id a640c23a62f3a-c246a692891mr1298531366b.23.1787383411862; Sat, 22 Aug 2026 00:23:31 -0700 (PDT) Received: from localhost.localdomain (dynamic-2a02-3100-a0f5-8c01-3de3-cd62-aa6f-2fb0.310.pool.telefonica.de. [2a02:3100:a0f5:8c01:3de3:cd62:aa6f:2fb0]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-c24966f6b48sm183689866b.33.2026.08.22.00.23.30 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Sat, 22 Aug 2026 00:23:31 -0700 (PDT) From: Karl Mehltretter To: Thomas Gleixner Cc: Karl Mehltretter , Gregory Price , Peter Zijlstra , Andy Lutomirski , Kees Cook , Joel Granados , Oleg Nesterov , Jonathan Corbet , Shuah Khan , Mark Brown , Stephen Rothwell , linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-next@vger.kernel.org Subject: [PATCH v2] syscall_user_dispatch: Use CONFIG_SYSCTL for sysctl guard Date: Sat, 22 Aug 2026 09:23:25 +0200 Message-Id: <20260822072325.51994-1-kmehltretter@gmail.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20260813062039.14567-1-kmehltretter@gmail.com> References: <20260813062039.14567-1-kmehltretter@gmail.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Commit 8d75c338f0bc ("sysctl: remove CONFIG_PROC_SYSCTL, it just mirrors CONFIG_SYSCTL") removed CONFIG_PROC_SYSCTL, but the sysctl added by commit 5b6e32ba7b59 ("syscall_user_dispatch: Add kernel.syscall_user_dispatch sysctl") is still guarded by it. Now that both commits are merged, kernel.syscall_user_dispatch is no longer registered. syscall_user_dispatch_allowed defaults to true. SUD therefore remains available, but administrators cannot disable new activations. Use CONFIG_SYSCTL for the guard and documentation. Fixes: 5b6e32ba7b59 ("syscall_user_dispatch: Add kernel.syscall_user_dispat= ch sysctl") Assisted-by: Codex:gpt-5.6-sol Acked-by: Oleg Nesterov Reviewed-by: Joel Granados Signed-off-by: Karl Mehltretter Acked-by: Randy Dunlap Reviewed-by: Bradley Morgan --- Changes in v2: - Reword changelog and rebase onto mainline now that both commits are merged there (v7.2 is unaffected, it has neither commit). - Collected Acked-by/Reviewed-by tags from v1. No code change. v1: https://lore.kernel.org/all/20260813062039.14567-1-kmehltretter@gmail.c= om/ Documentation/admin-guide/sysctl/kernel.rst | 2 +- kernel/entry/syscall_user_dispatch.c | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Documentation/admin-guide/sysctl/kernel.rst b/Documentation/ad= min-guide/sysctl/kernel.rst index b6328cd0f43e..ffea61d448eb 100644 --- a/Documentation/admin-guide/sysctl/kernel.rst +++ b/Documentation/admin-guide/sysctl/kernel.rst @@ -1416,7 +1416,7 @@ Controls whether userspace may arm Syscall User Dispa= tch via =3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Only present when the kernel is built with ``CONFIG_SYSCALL_USER_DISPATCH`` -and ``CONFIG_PROC_SYSCTL``. +and ``CONFIG_SYSCTL``. =20 =20 sysctl_writes_strict diff --git a/kernel/entry/syscall_user_dispatch.c b/kernel/entry/syscall_us= er_dispatch.c index 2002c7aae435..59c861866941 100644 --- a/kernel/entry/syscall_user_dispatch.c +++ b/kernel/entry/syscall_user_dispatch.c @@ -178,7 +178,7 @@ int syscall_user_dispatch_set_config(struct task_struct= *task, unsigned long siz (char __user *)(uintptr_t)cfg.selector); } =20 -#ifdef CONFIG_PROC_SYSCTL +#ifdef CONFIG_SYSCTL static const struct ctl_table syscall_user_dispatch_sysctls[] =3D { { .procname =3D "syscall_user_dispatch", @@ -195,4 +195,4 @@ static int __init syscall_user_dispatch_sysctl_init(voi= d) return 0; } late_initcall(syscall_user_dispatch_sysctl_init); -#endif /* CONFIG_PROC_SYSCTL */ +#endif /* CONFIG_SYSCTL */ base-commit: 26260251022fbc2f248a3d747a9b2b961b18d2d8 --=20 2.39.5 (Apple Git-154)