[GIT PULL] Landlock fix for v7.0-rc6

Mickaël Salaün mic at digikod.net
Thu Mar 26 17:27:27 UTC 2026


Hi,

This PR mainly fixes Landlock TSYNC issues related to interrupts and
unexpected task exit.  Other fixes touch documentation and sample, and a
new test extends coverage.

Please pull these changes for v7.0-rc6 .  These commits merge cleanly
with your master branch.  Kernel changes have been tested in the latest
linux-next releases for some weeks.

Test coverage for security/landlock is 91.0% of 2105 lines according to
LLVM 21, and it was (up to) 91.4% of 2093 lines before this PR.

syzkaller (also) reported the fixed issues:
- https://syzkaller.appspot.com/bug?extid=7ea2f5e9dfd468201817
- https://syzkaller.appspot.com/bug?extid=741e2278ef71fef03a10

Regards,
 Mickaël

--
The following changes since commit 11439c4635edd669ae435eec308f4ab8a0804808:

  Linux 7.0-rc2 (2026-03-01 15:39:31 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-7.0-rc6

for you to fetch changes up to a23811061a553c70c42de0e811b2ec15b2d54157:

  landlock: Expand restrict flags example for ABI version 8 (2026-03-24 20:55:55 +0100)

----------------------------------------------------------------
Landlock fix for v7.0-rc6

----------------------------------------------------------------
Günther Noack (1):
      samples/landlock: Bump ABI version to 8

Mickaël Salaün (4):
      landlock: Fix formatting
      landlock: Fully release unused TSYNC work entries
      landlock: Improve TSYNC types
      selftests/landlock: Test tsync interruption and cancellation paths

Panagiotis "Ivory" Vasilopoulos (1):
      landlock: Expand restrict flags example for ABI version 8

Yihan Ding (2):
      landlock: Serialize TSYNC thread restriction
      landlock: Clean up interrupted thread logic in TSYNC

 Documentation/userspace-api/landlock.rst      | 23 +++++--
 samples/landlock/sandboxer.c                  |  5 +-
 security/landlock/domain.c                    |  3 +-
 security/landlock/ruleset.c                   |  9 ++-
 security/landlock/tsync.c                     | 92 +++++++++++++++++++++------
 tools/testing/selftests/landlock/tsync_test.c | 91 +++++++++++++++++++++++++-
 6 files changed, 190 insertions(+), 33 deletions(-)



More information about the Linux-security-module-archive mailing list