5 files changed, 10 insertions, 5 deletions

diff --git a/arch/arm/kernel/ptrace.c b/arch/arm/kernel/ptrace.c
index 0c27ed6f3f23..5e772a21ab97 100644
--- a/arch/arm/kernel/ptrace.c
+++ b/arch/arm/kernel/ptrace.c
@@ -933,8 +933,13 @@ asmlinkage int syscall_trace_enter(struct pt_regs *regs, int scno)
         current_thread_info()->syscall = scno;
 
         /* Do the secure computing check first; failures should be fast. */
-        if (secure_computing(scno) == -1)
+#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTER
+        if (secure_computing() == -1)
                 return -1;
+#else
+        /* XXX: remove this once OABI gets fixed */
+        secure_computing_strict(scno);
+#endif
 
         if (test_thread_flag(TIF_SYSCALL_TRACE))
                 tracehook_report_syscall(regs, PTRACE_SYSCALL_ENTER);
diff --git a/arch/mips/kernel/ptrace.c b/arch/mips/kernel/ptrace.c
index 645b3c4fcfba..f7aac5b57b4b 100644
--- a/arch/mips/kernel/ptrace.c
+++ b/arch/mips/kernel/ptrace.c
@@ -770,7 +770,7 @@ asmlinkage long syscall_trace_enter(struct pt_regs *regs, long syscall)
         long ret = 0;
         user_exit();
 
-        if (secure_computing(syscall) == -1)
+        if (secure_computing() == -1)
                 return -1;
 
         if (test_thread_flag(TIF_SYSCALL_TRACE) &&
diff --git a/arch/s390/kernel/ptrace.c b/arch/s390/kernel/ptrace.c
index 5dc7ad9e2fbf..bebacad48305 100644
--- a/arch/s390/kernel/ptrace.c
+++ b/arch/s390/kernel/ptrace.c
@@ -803,7 +803,7 @@ asmlinkage long do_syscall_trace_enter(struct pt_regs *regs)
         long ret = 0;
 
         /* Do the secure computing check first. */
-        if (secure_computing(regs->gprs[2])) {
+        if (secure_computing()) {
                 /* seccomp failures shouldn't expose any additional code. */
                 ret = -1;
                 goto out;
diff --git a/arch/x86/kernel/ptrace.c b/arch/x86/kernel/ptrace.c
index 678c0ada3b3c..93c182a00506 100644
--- a/arch/x86/kernel/ptrace.c
+++ b/arch/x86/kernel/ptrace.c
@@ -1471,7 +1471,7 @@ long syscall_trace_enter(struct pt_regs *regs)
                 regs->flags |= X86_EFLAGS_TF;
 
         /* do the secure computing check first */
-        if (secure_computing(regs->orig_ax)) {
+        if (secure_computing()) {
                 /* seccomp failures shouldn't expose any additional code. */
                 ret = -1L;
                 goto out;
diff --git a/arch/x86/kernel/vsyscall_64.c b/arch/x86/kernel/vsyscall_64.c
index e1e1e80fc6a6..957779f4eb40 100644
--- a/arch/x86/kernel/vsyscall_64.c
+++ b/arch/x86/kernel/vsyscall_64.c
@@ -216,7 +216,7 @@ bool emulate_vsyscall(struct pt_regs *regs, unsigned long address)
          */
         regs->orig_ax = syscall_nr;
         regs->ax = -ENOSYS;
-        tmp = secure_computing(syscall_nr);
+        tmp = secure_computing();
         if ((!tmp && regs->orig_ax != syscall_nr) || regs->ip != address) {
                 warn_bad_vsyscall(KERN_DEBUG, regs,
                                   "seccomp tried to change syscall nr or ip");