linux-kernel - [GIT PULL] Landlock update for v6.19-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20251205183825.737361-1-mic@digikod.net>
Date: Fri,  5 Dec 2025 19:38:25 +0100
From: Mickaël Salaün <mic@...ikod.net>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Mickaël Salaün <mic@...ikod.net>,
	Günther Noack <gnoack@...gle.com>,
	Matthieu Buffet <matthieu@...fet.re>,
	Song Liu <song@...nel.org>,
	Tingmao Wang <m@...wtm.org>,
	linux-kernel@...r.kernel.org,
	linux-security-module@...r.kernel.org
Subject: [GIT PULL] Landlock update for v6.19-rc1

Hi,

This PR mainly fixes handling of disconnected directories and add new
tests.

Please pull these changes for v6.19-rc1 .  These commits merge cleanly
with your master branch.  The kernel changes have been tested in the
latest linux-next releases for some weeks (even if the last version
landed last week).

Test coverage for security/landlock is 92.1% of 1927 lines according to
LLVM 21, and it was 92.0% of 1923 lines before this PR.

A new syzkaller test has been developed for this specific case:
https://github.com/google/syzkaller/pull/6164

Regards,
 Mickaël

--
The following changes since commit ac3fd01e4c1efce8f2c054cdeb2ddd2fc0fb150d:

  Linux 6.18-rc7 (2025-11-23 14:53:16 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc1

for you to fetch changes up to 54f9baf537b0a091adad860ec92e3e18e0a0754c:

  selftests/landlock: Add disconnected leafs and branch test suites (2025-11-28 18:27:07 +0100)

----------------------------------------------------------------
Landlock update for v6.19-rc1

----------------------------------------------------------------
Matthieu Buffet (1):
      selftests/landlock: Fix makefile header list

Mickaël Salaün (3):
      landlock: Fix handling of disconnected directories
      landlock: Improve variable scope
      selftests/landlock: Add disconnected leafs and branch test suites

Tingmao Wang (3):
      landlock: Minor comments improvements
      landlock: Make docs in cred.h and domain.h visible
      selftests/landlock: Add tests for access through disconnected paths

 Documentation/security/landlock.rst        |   11 +-
 security/landlock/errata/abi-1.h           |   16 +
 security/landlock/fs.c                     |   46 +-
 security/landlock/ruleset.c                |   12 +-
 security/landlock/ruleset.h                |    2 +-
 tools/testing/selftests/landlock/Makefile  |    2 +-
 tools/testing/selftests/landlock/fs_test.c | 1474 +++++++++++++++++++++++++++-
 7 files changed, 1536 insertions(+), 27 deletions(-)
 create mode 100644 security/landlock/errata/abi-1.h