[GIT PULL] Landlock fix for v6.19-rc6

Mickaël Salaün mic at digikod.net
Thu Jan 15 21:47:40 UTC 2026


Hi,

This PR fixes TCP handling, tests, documentation, non-audit elided code,
and minor cosmetic changes.

Please pull these changes for v6.19-rc6 .  These commits merge cleanly
with your master branch.  The kernel changes have been tested in the
latest linux-next releases for some weeks.

Test coverage for security/landlock is 91.9% of 1933 lines according to
LLVM 21, and it was 92.1% of 1927 lines before this PR.

Regards,
 Mickaël

--
The following changes since commit 8f0b4cce4481fb22653697cced8d0d04027cb1e8:

  Linux 6.19-rc1 (2025-12-14 16:05:07 +1200)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc6

for you to fetch changes up to 6abbb8703aeeb645a681ab6ad155e0b450413787:

  landlock: Clarify documentation for the IOCTL access right (2026-01-12 17:07:21 +0100)

----------------------------------------------------------------
Landlock fix for v6.19-rc6

----------------------------------------------------------------
Günther Noack (2):
      selftests/landlock: Properly close a file descriptor
      landlock: Clarify documentation for the IOCTL access right

Matthieu Buffet (5):
      landlock: Fix TCP handling of short AF_UNSPEC addresses
      selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
      selftests/landlock: Add missing connect(minimal AF_UNSPEC) test
      selftests/landlock: Remove invalid unix socket bind()
      selftests/landlock: NULL-terminate unix pathname addresses

Mickaël Salaün (6):
      landlock: Fix formatting
      landlock: Remove useless include
      landlock: Improve erratum documentation
      landlock: Clean up hook_ptrace_access_check()
      landlock: Fix spelling
      landlock: Optimize stack usage when !CONFIG_AUDIT

Tingmao Wang (5):
      landlock: Fix wrong type usage
      selftests/landlock: Fix typo in fs_test
      selftests/landlock: Fix missing semicolon
      selftests/landlock: Use scoped_base_variants.h for ptrace_test
      landlock: Improve the comment for domain_is_scoped

 include/uapi/linux/landlock.h                      |  37 +++--
 security/landlock/audit.c                          |   2 +-
 security/landlock/domain.h                         |   2 +-
 security/landlock/errata/abi-6.h                   |   2 +-
 security/landlock/fs.c                             |  14 +-
 security/landlock/net.c                            | 118 +++++++++-------
 security/landlock/ruleset.c                        |   1 -
 security/landlock/task.c                           |  12 +-
 tools/testing/selftests/landlock/common.h          |   1 +
 tools/testing/selftests/landlock/fs_test.c         |  34 ++---
 tools/testing/selftests/landlock/net_test.c        |  30 +++-
 tools/testing/selftests/landlock/ptrace_test.c     | 154 +--------------------
 .../selftests/landlock/scoped_abstract_unix_test.c |  23 ++-
 .../selftests/landlock/scoped_base_variants.h      |   9 +-
 14 files changed, 170 insertions(+), 269 deletions(-)



More information about the Linux-security-module-archive mailing list