linux-kernel - [GIT PULL] Landlock fix for v6.14-rc5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250226163229.2132331-1-mic@digikod.net>
Date: Wed, 26 Feb 2025 17:32:29 +0100
From: Mickaël Salaün <mic@...ikod.net>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Mickaël Salaün <mic@...ikod.net>,
	Bharadwaj Raju <bharadwaj.raju777@...il.com>,
	Günther Noack <gnoack@...gle.com>,
	Mikhail Ivanov <ivanov.mikhail1@...wei-partners.com>,
	Tanya Agarwal <tanyaagarwal25699@...il.com>,
	linux-kernel@...r.kernel.org,
	linux-security-module@...r.kernel.org
Subject: [GIT PULL] Landlock fix for v6.14-rc5

Hi Linus,

This PR fixes TCP socket identification, documentation, and tests.

Please pull these changes for v6.14-rc5 .  These commits merge cleanly with
your master branch.  The kernel code has been tested in the latest linux-next
releases for two weeks and rebased to update commit messages.

Test coverage for security/landlock is 92.8% of 1035 lines according to
gcc/gcov-14, and it was the same before this PR.

Regards,
 Mickaël

--
The following changes since commit a64dcfb451e254085a7daee5fe51bf22959d52d3:

  Linux 6.14-rc2 (2025-02-09 12:45:03 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.14-rc5

for you to fetch changes up to 78332fdb956f18accfbca5993b10c5ed69f00a2c:

  selftests/landlock: Add binaries to .gitignore (2025-02-14 09:23:11 +0100)

----------------------------------------------------------------
Landlock fix for v6.14-rc5

----------------------------------------------------------------
Bharadwaj Raju (1):
      selftests/landlock: Add binaries to .gitignore

Günther Noack (1):
      landlock: Minor typo and grammar fixes in IPC scoping documentation

Mickaël Salaün (1):
      selftests/landlock: Enable the new CONFIG_AF_UNIX_OOB

Mikhail Ivanov (3):
      landlock: Fix non-TCP sockets restriction
      selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
      selftests/landlock: Test that MPTCP actions are not restricted

Tanya Agarwal (1):
      landlock: Fix grammar error

 Documentation/userspace-api/landlock.rst    |   6 +-
 include/uapi/linux/landlock.h               |   8 +-
 security/landlock/net.c                     |   3 +-
 security/landlock/ruleset.c                 |   2 +-
 tools/testing/selftests/landlock/.gitignore |   2 +
 tools/testing/selftests/landlock/common.h   |   1 +
 tools/testing/selftests/landlock/config     |   3 +
 tools/testing/selftests/landlock/net_test.c | 124 ++++++++++++++++++++++++----
 8 files changed, 127 insertions(+), 22 deletions(-)