linux-kernel - [GIT PULL] Landlock fix for v6.19-rc6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20260115214740.803611-1-mic@digikod.net>
Date: Thu, 15 Jan 2026 22:47:40 +0100
From: Mickaël Salaün <mic@...ikod.net>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Mickaël Salaün <mic@...ikod.net>,
	Günther Noack <gnoack@...gle.com>,
	Matthieu Buffet <matthieu@...fet.re>,
	Tingmao Wang <m@...wtm.org>,
	linux-kernel@...r.kernel.org,
	linux-security-module@...r.kernel.org
Subject: [GIT PULL] Landlock fix for v6.19-rc6

Hi,

This PR fixes TCP handling, tests, documentation, non-audit elided code,
and minor cosmetic changes.

Please pull these changes for v6.19-rc6 .  These commits merge cleanly
with your master branch.  The kernel changes have been tested in the
latest linux-next releases for some weeks.

Test coverage for security/landlock is 91.9% of 1933 lines according to
LLVM 21, and it was 92.1% of 1927 lines before this PR.

Regards,
 Mickaël

--
The following changes since commit 8f0b4cce4481fb22653697cced8d0d04027cb1e8:

  Linux 6.19-rc1 (2025-12-14 16:05:07 +1200)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc6

for you to fetch changes up to 6abbb8703aeeb645a681ab6ad155e0b450413787:

  landlock: Clarify documentation for the IOCTL access right (2026-01-12 17:07:21 +0100)

----------------------------------------------------------------
Landlock fix for v6.19-rc6

----------------------------------------------------------------
Günther Noack (2):
      selftests/landlock: Properly close a file descriptor
      landlock: Clarify documentation for the IOCTL access right

Matthieu Buffet (5):
      landlock: Fix TCP handling of short AF_UNSPEC addresses
      selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
      selftests/landlock: Add missing connect(minimal AF_UNSPEC) test
      selftests/landlock: Remove invalid unix socket bind()
      selftests/landlock: NULL-terminate unix pathname addresses

Mickaël Salaün (6):
      landlock: Fix formatting
      landlock: Remove useless include
      landlock: Improve erratum documentation
      landlock: Clean up hook_ptrace_access_check()
      landlock: Fix spelling
      landlock: Optimize stack usage when !CONFIG_AUDIT

Tingmao Wang (5):
      landlock: Fix wrong type usage
      selftests/landlock: Fix typo in fs_test
      selftests/landlock: Fix missing semicolon
      selftests/landlock: Use scoped_base_variants.h for ptrace_test
      landlock: Improve the comment for domain_is_scoped

 include/uapi/linux/landlock.h                      |  37 +++--
 security/landlock/audit.c                          |   2 +-
 security/landlock/domain.h                         |   2 +-
 security/landlock/errata/abi-6.h                   |   2 +-
 security/landlock/fs.c                             |  14 +-
 security/landlock/net.c                            | 118 +++++++++-------
 security/landlock/ruleset.c                        |   1 -
 security/landlock/task.c                           |  12 +-
 tools/testing/selftests/landlock/common.h          |   1 +
 tools/testing/selftests/landlock/fs_test.c         |  34 ++---
 tools/testing/selftests/landlock/net_test.c        |  30 +++-
 tools/testing/selftests/landlock/ptrace_test.c     | 154 +--------------------
 .../selftests/landlock/scoped_abstract_unix_test.c |  23 ++-
 .../selftests/landlock/scoped_base_variants.h      |   9 +-
 14 files changed, 170 insertions(+), 269 deletions(-)