linux/security/landlock
Günther Noack a46e32db1f
landlock: Clarify BUILD_BUG_ON check in scoping logic
The BUILD_BUG_ON check in domain_is_scoped() and
unmask_scoped_access() should check that the loop that counts down
client_layer finishes.  We therefore check that the numbers
LANDLOCK_MAX_NUM_LAYERS-1 and -1 are both representable by that
integer.  If they are representable, the numbers in between are
representable too, and the loop finishes.

Signed-off-by: Günther Noack <gnoack3000@gmail.com>
Link: https://lore.kernel.org/r/20260327164838.38231-6-gnoack3000@gmail.com
Signed-off-by: Mickaël Salaün <mic@digikod.net>
2026-04-07 18:51:07 +02:00
..
errata landlock: Add errata documentation section 2026-02-06 17:54:43 +01:00
.kunitconfig landlock: Add unique ID generator 2025-03-26 13:59:34 +01:00
access.h landlock: Control pathname UNIX domain socket resolution by path 2026-04-07 18:51:06 +02:00
audit.c landlock: Control pathname UNIX domain socket resolution by path 2026-04-07 18:51:06 +02:00
audit.h landlock: Transpose the layer masks data structure 2026-02-10 16:46:50 +01:00
common.h landlock: Add support for KUnit tests 2024-02-27 11:21:45 +01:00
cred.c landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() 2026-04-07 18:50:56 +02:00
cred.h landlock: Improve kernel-doc "Return:" section consistency 2026-04-07 18:51:04 +02:00
domain.c landlock: Improve kernel-doc "Return:" section consistency 2026-04-07 18:51:04 +02:00
domain.h landlock: Transpose the layer masks data structure 2026-02-10 16:46:50 +01:00
errata.h landlock: Prepare to add second errata 2025-03-21 12:12:21 +01:00
fs.c landlock: Clarify BUILD_BUG_ON check in scoping logic 2026-04-07 18:51:07 +02:00
fs.h landlock: Log scoped denials 2025-03-26 13:59:42 +01:00
id.c landlock: Improve kernel-doc "Return:" section consistency 2026-04-07 18:51:04 +02:00
id.h landlock: Add unique ID generator 2025-03-26 13:59:34 +01:00
Kconfig landlock: Add support for KUnit tests 2024-02-27 11:21:45 +01:00
limits.h landlock: Control pathname UNIX domain socket resolution by path 2026-04-07 18:51:06 +02:00
Makefile landlock: Multithreading support for landlock_restrict_self() 2026-02-06 17:54:37 +01:00
net.c landlock: Transpose the layer masks data structure 2026-02-10 16:46:50 +01:00
net.h landlock: Support network rules with TCP bind and connect 2023-10-26 21:07:15 +02:00
object.c treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
object.h landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
ruleset.c landlock: Fix kernel-doc warning for pointer-to-array parameters 2026-04-07 18:51:05 +02:00
ruleset.h landlock: Improve kernel-doc "Return:" section consistency 2026-04-07 18:51:04 +02:00
setup.c lsm: replace the name field with a pointer to the lsm_id struct 2025-10-22 19:24:18 -04:00
setup.h landlock: Add the errata interface 2025-03-21 12:12:19 +01:00
syscalls.c landlock: Control pathname UNIX domain socket resolution by path 2026-04-07 18:51:06 +02:00
task.c landlock: Clarify BUILD_BUG_ON check in scoping logic 2026-04-07 18:51:07 +02:00
task.h landlock: Rename "ptrace" files to "task" 2024-03-08 18:22:16 +01:00
tsync.c landlock: Fix formatting in tsync.c 2026-04-07 18:51:04 +02:00
tsync.h landlock: Multithreading support for landlock_restrict_self() 2026-02-06 17:54:37 +01:00