[GIT PULL] Landlock fix for v6.14-rc5

Mickaël Salaün mic at digikod.net
Wed Feb 26 16:32:29 UTC 2025


Hi Linus,

This PR fixes TCP socket identification, documentation, and tests.

Please pull these changes for v6.14-rc5 .  These commits merge cleanly with
your master branch.  The kernel code has been tested in the latest linux-next
releases for two weeks and rebased to update commit messages.

Test coverage for security/landlock is 92.8% of 1035 lines according to
gcc/gcov-14, and it was the same before this PR.

Regards,
 Mickaël

--
The following changes since commit a64dcfb451e254085a7daee5fe51bf22959d52d3:

  Linux 6.14-rc2 (2025-02-09 12:45:03 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.14-rc5

for you to fetch changes up to 78332fdb956f18accfbca5993b10c5ed69f00a2c:

  selftests/landlock: Add binaries to .gitignore (2025-02-14 09:23:11 +0100)

----------------------------------------------------------------
Landlock fix for v6.14-rc5

----------------------------------------------------------------
Bharadwaj Raju (1):
      selftests/landlock: Add binaries to .gitignore

Günther Noack (1):
      landlock: Minor typo and grammar fixes in IPC scoping documentation

Mickaël Salaün (1):
      selftests/landlock: Enable the new CONFIG_AF_UNIX_OOB

Mikhail Ivanov (3):
      landlock: Fix non-TCP sockets restriction
      selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
      selftests/landlock: Test that MPTCP actions are not restricted

Tanya Agarwal (1):
      landlock: Fix grammar error

 Documentation/userspace-api/landlock.rst    |   6 +-
 include/uapi/linux/landlock.h               |   8 +-
 security/landlock/net.c                     |   3 +-
 security/landlock/ruleset.c                 |   2 +-
 tools/testing/selftests/landlock/.gitignore |   2 +
 tools/testing/selftests/landlock/common.h   |   1 +
 tools/testing/selftests/landlock/config     |   3 +
 tools/testing/selftests/landlock/net_test.c | 124 ++++++++++++++++++++++++----
 8 files changed, 127 insertions(+), 22 deletions(-)



More information about the Linux-security-module-archive mailing list