linux-kernel - [GIT PULL] Landlock updates for v6.9

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20240313175307.714251-1-mic@digikod.net>
Date: Wed, 13 Mar 2024 18:53:07 +0100
From: Mickaël Salaün <mic@...ikod.net>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Mickaël Salaün <mic@...ikod.net>,
	Günther Noack <gnoack@...gle.com>,
	Paul Moore <paul@...l-moore.com>,
	linux-kernel@...r.kernel.org,
	linux-security-module@...r.kernel.org
Subject: [GIT PULL] Landlock updates for v6.9

Hi Linus,

This PR brings some miscellaneous improvements, including new KUnit tests,
extended documentation and boot help, and some cosmetic cleanups.

Additional test changes already went through the net tree.

Please pull these changes for v6.9-rc1.  This commit merged cleanly with
your master branch.  The kernel code has been tested in the latest
linux-next releases for a few weeks.

Regards,
 Mickaël

--
The following changes since commit d9818b3e906a0ee1ab02ea79e74a2f755fc5461a:

  landlock: Fix asymmetric private inodes referring (2024-02-26 18:23:53 +0100)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.9-rc1

for you to fetch changes up to a17c60e533f5cd832e77e0d194e2e0bb663371b6:

  samples/landlock: Don't error out if a file path cannot be opened (2024-03-08 18:22:18 +0100)

----------------------------------------------------------------
Landlock updates for v6.9-rc1

----------------------------------------------------------------
Mickaël Salaün (8):
      selftests/landlock: Clean up error logs related to capabilities
      landlock: Add support for KUnit tests
      landlock: Extend documentation for kernel support
      landlock: Warn once if a Landlock action is requested while disabled
      landlock: Simplify current_check_access_socket()
      landlock: Rename "ptrace" files to "task"
      landlock: Use f_cred in security_file_open() hook
      samples/landlock: Don't error out if a file path cannot be opened

 Documentation/userspace-api/landlock.rst     |  59 ++++++-
 samples/landlock/sandboxer.c                 |  13 +-
 security/landlock/.kunitconfig               |   4 +
 security/landlock/Kconfig                    |  15 ++
 security/landlock/Makefile                   |   2 +-
 security/landlock/common.h                   |   2 +
 security/landlock/fs.c                       | 252 ++++++++++++++++++++++++++-
 security/landlock/net.c                      |   7 +-
 security/landlock/setup.c                    |   4 +-
 security/landlock/syscalls.c                 |  18 +-
 security/landlock/{ptrace.c => task.c}       |   4 +-
 security/landlock/{ptrace.h => task.h}       |   8 +-
 tools/testing/kunit/configs/all_tests.config |   1 +
 tools/testing/selftests/landlock/common.h    |  39 +----
 14 files changed, 363 insertions(+), 65 deletions(-)
 create mode 100644 security/landlock/.kunitconfig
 rename security/landlock/{ptrace.c => task.c} (98%)
 rename security/landlock/{ptrace.h => task.h} (52%)