[PATCH] syscalls: Update the syscall table for Linux v6.12-rc5

Due to the addition of fstat & newfstatat to the LoongArch syscall ABI,
tests 38 and 55 have to be updated for the changed syscall numbers.

As for the PNR additions, normally they are allocated alphabetically for
the syscalls introduced between updates of the table, but in the v2.5
release branch -10245 is already assigned to map_shadow_stack in
commit 53267af3fb5 ("all: update the syscall table for Linux v6.7-rc3").
While the map_shadow_stack syscall is in fact available across all
architectures, for consistency with v2.5.5 and later it is kept in the
same position in this update.

Signed-off-by: WANG Xuerui <git@xen0n.name>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name syscalls_Update_the_syscall_table_for_Linux_v6.12-rc5.patch

[PATCH] arch: adapt arch-syscall-validate to Linux 6.11

The aarch64, loongarch64 and riscv64 architectures have their syscall
table sources changed to scripts/syscall.tbl, from the original
inclusion of asm-generic/unistd.h. Make the script recognize the new
format for these architectures.

Signed-off-by: WANG Xuerui <git@xen0n.name>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name arch_adapt_arch-syscall-validate_to_Linux_6.11.patch

[PATCH] arch: unify handling of syscall.tbl in arch-syscall-validate

Apart from de-duplication of logic, this refactor is also going to help
syncing to the Linux 6.11+ definitions, where all architectures are
converted to source their syscall definitions from syscall.tbl files.

The change is tested on Linux 6.2 sources to not affect the generated
syscalls.csv apart from timestamp changes.

Signed-off-by: WANG Xuerui <git@xen0n.name>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name arch_unify_handling_of_syscall.tbl_in_arch-syscall-validate.patch

[PATCH] tests: only use bogus syscall numbers in test 29

The goal of test 29 is to test bogus negative syscall numbers,
unfortunately it appears our choice of syscalls was not bogus on all
the architectures we support.  This commit fixes that by picking a
syscall number well outside the pseudo-syscall/PNR range and removing
the sysmips(2) syscall from the test so as to not cause problems
at a later date.

Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>
Gbp-Pq: Name tests_only_use_bogus_syscall_numbers_in_test_29.patch

[PATCH] tests: Fix wrong syscall-error in test 29

29-sim-pseudo_syscall.c was using `-11001` syscall.
Corrected it to `-10001`.

Signed-off-by: Mayank Mrinal <mayank.mrinal@sony.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>
Gbp-Pq: Name tests_Fix_wrong_syscall-error_in_test_29.patch

[PATCH] doc: update README and manpage for 64-bit LoongArch

Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name doc_update_README_and_manpage_for_64-bit_LoongArch.patch

[PATCH] tests: Add 64-bit LoongArch support

[xen0n: LoongArch (and a few upcoming architectures / ABIs) does not
have fstat, so the fstat in 06-sim-actions is also being changed to
fstatfs for uniformity across the board.]

Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn>
Signed-off-by: WANG Xuerui <git@xen0n.name>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name tests_Add_64-bit_LoongArch_support.patch

[PATCH] arch: Add 64-bit LoongArch support

Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn>
Signed-off-by: WANG Xuerui <git@xen0n.name>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name arch_Add_64-bit_LoongArch_support.patch

[PATCH] tests: add fstatfs() syscall in the 06-sim-actions

Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name tests_add_fstatfs_syscall_in_the_06-sim-actions.patch

[PATCH] syscalls: update to Linux v6.0

Signed-off-by: Xiaotian Wu <wuxiaotian@loongson.cn>
Signed-off-by: WANG Xuerui <git@xen0n.name>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Gbp-Pq: Name syscalls_update_to_Linux_v6.0.patch

python_single_version_externally_managed

Fix building with setuptools instead of distutils.

Gbp-Pq: Name python_single_version_externally_managed.patch

[PATCH] python: Fix distutils DeprecationWarning

The python distutils package is deprecated.  Utilize
setuptools and cythonize instead.

./setup.py:26: DeprecationWarning: The distutils
package is deprecated and slated for removal in
Python 3.12. Use setuptools or check PEP 632 [1] for
potential alternatives

[1] https://peps.python.org/pep-0632/

Fixes: https://github.com/seccomp/libseccomp/issues/372
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>
Gbp-Pq: Name python_Fix_distutils_DeprecationWarning.patch

libseccomp (2.5.5-2) unstable; urgency=medium

  * Revert: Dynamically skip autopkgtests when the test runner already applies
    seccomp restrictions.
    - Container based backends usually apply a seccomp filter so it's better
      to declare the isolation-machine restriction.
  * Backport support for syscalls up to kernel v6.12-rc5 and loongarch64.
    (Closes: #1051323)
    - syscalls_update_to_Linux_v6.0.patch
    - tests_add_fstatfs_syscall_in_the_06-sim-actions.patch
    - arch_Add_64-bit_LoongArch_support.patch
    - tests_Add_64-bit_LoongArch_support.patch
    - doc_update_README_and_manpage_for_64-bit_LoongArch.patch
    - tests_Fix_wrong_syscall-error_in_test_29.patch
    - tests_only_use_bogus_syscall_numbers_in_test_29.patch
    - arch_unify_handling_of_syscall.tbl_in_arch-syscall-validate.patch
    - arch_adapt_arch-syscall-validate_to_Linux_6.11.patch
    - syscalls_Update_the_syscall_table_for_Linux_v6.12-rc5.patch

[dgit import unpatched libseccomp 2.5.5-2]

Import libseccomp_2.5.5-2.debian.tar.xz

[dgit import tarball libseccomp 2.5.5-2 libseccomp_2.5.5-2.debian.tar.xz]

Import libseccomp_2.5.5.orig.tar.gz

[dgit import orig libseccomp_2.5.5.orig.tar.gz]