[PATCH v1 8/9] selftests/landlock: Test network denial context
sashiko-bot at kernel.org
sashiko-bot at kernel.org
Fri Sep 18 18:58:04 UTC 2026
> Network denial events now report the port from their one authoritative
> validated address through one signed field. Verify this value directly
> without inferring a source or destination role.
>
> Exercise a nonzero IPv4 TCP bind, an explicit-zero IPv4 UDP bind, a
> synthetic-zero IPv6 UDP autobind, and a family-only AF_UNSPEC UDP send.
> Require exactly one event with the exact policy blocker for each shape.
> The value -1 distinguishes a family-only address with no validated port
> from the two valid port-zero cases.
>
> Cc: Günther Noack <gnoack at google.com>
> Cc: Steven Rostedt <rostedt at goodmis.org>
> Signed-off-by: Mickaël Salaün <mic at digikod.net>
Sashiko has reviewed this patch and found no issues. It looks great!
--
Sashiko AI review · https://sashiko.dev/#/patchset/20260918185036.608651-1-mic@digikod.net?part=8
More information about the Linux-security-module-archive
mailing list