[PATCH v1 8/9] selftests/landlock: Test network denial context

sashiko-bot at kernel.org sashiko-bot at kernel.org
Fri Sep 18 18:58:04 UTC 2026


> Network denial events now report the port from their one authoritative
> validated address through one signed field.  Verify this value directly
> without inferring a source or destination role.
> 
> Exercise a nonzero IPv4 TCP bind, an explicit-zero IPv4 UDP bind, a
> synthetic-zero IPv6 UDP autobind, and a family-only AF_UNSPEC UDP send.
> Require exactly one event with the exact policy blocker for each shape.
> The value -1 distinguishes a family-only address with no validated port
> from the two valid port-zero cases.
> 
> Cc: Günther Noack <gnoack at google.com>
> Cc: Steven Rostedt <rostedt at goodmis.org>
> Signed-off-by: Mickaël Salaün <mic at digikod.net>

Sashiko has reviewed this patch and found no issues. It looks great!

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20260918185036.608651-1-mic@digikod.net?part=8




More information about the Linux-security-module-archive mailing list