[PATCH v3 2/2] selftests/landlock: cover TTY signal scoping

sashiko-bot at kernel.org sashiko-bot at kernel.org
Wed Sep 23 16:42:40 UTC 2026


> LANDLOCK_SCOPE_SIGNAL blocks signaling an arbitrary out-of-domain process,
> but a PTY master retains signal delivery to its terminal foreground process
> group.
> 
> Add a test that enters a signal-scoped domain, checks that kill(SIGUSR1)
> is denied with EPERM, and checks that TIOCSIG(SIGTSTP) succeeds and reaches
> the target's signal handler.
> 
> Tested the focused case in three QEMU boots and ran the complete Landlock
> selftest suite (12 programs, no failures).  Built all Landlock selftests
> with W=1.
> 
> Link: https://lore.kernel.org/r/20260916152336.1589383-1-clusk@northecho.dev
> Suggested-by: Günther Noack <gnoack at google.com>
> Suggested-by: Mickaël Salaün <mic at digikod.net>
> Assisted-by: Codex:gpt-5.6-sol
> Signed-off-by: Christopher Lusk <clusk at northecho.dev>

Sashiko has reviewed this patch and found no issues. It looks great!

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20260923163321.79770-1-clusk@northecho.dev?part=2




More information about the Linux-security-module-archive mailing list