[GIT PULL] Landlock updates for v6.8

Mickaël Salaün mic at digikod.net
Mon Jan 8 11:33:11 UTC 2024


Hi Linus,

This PR adds new tests, a slight optimization, and some cosmetic changes.

Please pull these changes for v6.8-rc1.  These 7 commits merged cleanly with
your master branch.  The kernel code has been tested in the latest linux-next
releases for a few weeks.  I rebased the latest patches with updated
descriptions though.

Test coverage for security/landlock is 92.4% of 710 lines according to
gcc/gcov-13, same as before because only semantic tests are added.

Regards,
 Mickaël

--
The following changes since commit b85ea95d086471afb4ad062012a4d73cd328fa86:

  Linux 6.7-rc1 (2023-11-12 16:19:07 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.8-rc1

for you to fetch changes up to 0daaa610c8e033cdfb420db728c2b40eb3a75134:

  landlock: Optimize the number of calls to get_access_mask slightly (2024-01-03 12:43:17 +0100)

----------------------------------------------------------------
Landlock updates for v6.8-rc1

----------------------------------------------------------------
Günther Noack (5):
      landlock: Remove remaining "inline" modifiers in .c files [v5.15]
      landlock: Remove remaining "inline" modifiers in .c files [v6.1]
      landlock: Remove remaining "inline" modifiers in .c files [v6.6]
      selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests
      landlock: Optimize the number of calls to get_access_mask slightly

Mickaël Salaün (2):
      selftests/landlock: Add tests to check unknown rule's access rights
      selftests/landlock: Add tests to check unhandled rule's access rights

 security/landlock/fs.c                      | 26 +++++-----
 security/landlock/ruleset.c                 |  7 +--
 tools/testing/selftests/landlock/fs_test.c  | 80 +++++++++++++++++++++++++----
 tools/testing/selftests/landlock/net_test.c | 59 ++++++++++++++++++++-
 4 files changed, 145 insertions(+), 27 deletions(-)



More information about the Linux-security-module-archive mailing list