[PATCH v1 2/5] landlock: Improve erratum documentation

Mickaël Salaün mic at digikod.net
Fri Dec 19 19:38:48 UTC 2025


Improve description about scoped signal handling.

Reported-by: Günther Noack <gnoack3000 at gmail.com>
Signed-off-by: Mickaël Salaün <mic at digikod.net>
---
 security/landlock/errata/abi-6.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security/landlock/errata/abi-6.h b/security/landlock/errata/abi-6.h
index df7bc0e1fdf4..5113a829f87e 100644
--- a/security/landlock/errata/abi-6.h
+++ b/security/landlock/errata/abi-6.h
@@ -9,7 +9,7 @@
  * This fix addresses an issue where signal scoping was overly restrictive,
  * preventing sandboxed threads from signaling other threads within the same
  * process if they belonged to different domains.  Because threads are not
- * security boundaries, user space might assume that any thread within the same
+ * security boundaries, user space might assume that all threads within the same
  * process can send signals between themselves (see :manpage:`nptl(7)` and
  * :manpage:`libpsx(3)`).  Consistent with :manpage:`ptrace(2)` behavior, direct
  * interaction between threads of the same process should always be allowed.
-- 
2.52.0




More information about the Linux-security-module-archive mailing list