[GIT PULL] Landlock update for v6.19-rc1

Mickaël Salaün mic at digikod.net
Fri Dec 5 18:38:25 UTC 2025


Hi,

This PR mainly fixes handling of disconnected directories and add new
tests.

Please pull these changes for v6.19-rc1 .  These commits merge cleanly
with your master branch.  The kernel changes have been tested in the
latest linux-next releases for some weeks (even if the last version
landed last week).

Test coverage for security/landlock is 92.1% of 1927 lines according to
LLVM 21, and it was 92.0% of 1923 lines before this PR.

A new syzkaller test has been developed for this specific case:
https://github.com/google/syzkaller/pull/6164

Regards,
 Mickaël

--
The following changes since commit ac3fd01e4c1efce8f2c054cdeb2ddd2fc0fb150d:

  Linux 6.18-rc7 (2025-11-23 14:53:16 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc1

for you to fetch changes up to 54f9baf537b0a091adad860ec92e3e18e0a0754c:

  selftests/landlock: Add disconnected leafs and branch test suites (2025-11-28 18:27:07 +0100)

----------------------------------------------------------------
Landlock update for v6.19-rc1

----------------------------------------------------------------
Matthieu Buffet (1):
      selftests/landlock: Fix makefile header list

Mickaël Salaün (3):
      landlock: Fix handling of disconnected directories
      landlock: Improve variable scope
      selftests/landlock: Add disconnected leafs and branch test suites

Tingmao Wang (3):
      landlock: Minor comments improvements
      landlock: Make docs in cred.h and domain.h visible
      selftests/landlock: Add tests for access through disconnected paths

 Documentation/security/landlock.rst        |   11 +-
 security/landlock/errata/abi-1.h           |   16 +
 security/landlock/fs.c                     |   46 +-
 security/landlock/ruleset.c                |   12 +-
 security/landlock/ruleset.h                |    2 +-
 tools/testing/selftests/landlock/Makefile  |    2 +-
 tools/testing/selftests/landlock/fs_test.c | 1474 +++++++++++++++++++++++++++-
 7 files changed, 1536 insertions(+), 27 deletions(-)
 create mode 100644 security/landlock/errata/abi-1.h



More information about the Linux-security-module-archive mailing list