linux/security/landlock
Linus Torvalds 5e2e14749c Landlock update for v7.2-rc1
-----BEGIN PGP SIGNATURE-----
 
 iIYEABYKAC4WIQSVyBthFV4iTW/VU1/l49DojIL20gUCajT1cxAcbWljQGRpZ2lr
 b2QubmV0AAoJEOXj0OiMgvbSAWcBAKtN0xWVNJM6jXj5q2EHO5vOFTvoLD9KNLsK
 9FJoWN3dAQCWsuMI1OBovh6JguJ/jvwB2chwwa5NGxanhQ1LP9NyCg==
 =4cLz
 -----END PGP SIGNATURE-----

Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

Pull landlock updates from Mickaël Salaün:
 "This adds new Landlock access rights to control UDP bind and
  connect/send operations, and a new "quiet" feature to mute specific
  specific audit logs (and other future observability events).

  A few commits also fix Landlock issues"

* tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux: (24 commits)
  selftests/landlock: Add tests for invalid use of quiet flag
  selftests/landlock: Add tests for quiet flag with scope
  selftests/landlock: Add tests for quiet flag with net rules
  selftests/landlock: Add tests for quiet flag with fs rules
  selftests/landlock: Replace hard-coded 16 with a constant
  samples/landlock: Add quiet flag support to sandboxer
  landlock: Suppress logging when quiet flag is present
  landlock: Add API support and docs for the quiet flags
  landlock: Add a place for flags to layer rules
  landlock: Add documentation for UDP support
  samples/landlock: Add sandboxer UDP access control
  selftests/landlock: Add tests for UDP send
  selftests/landlock: Add tests for UDP bind/connect
  landlock: Add UDP send+connect access control
  landlock: Add UDP bind() access control
  landlock: Fix unmarked concurrent access to socket family
  selftests/landlock: Explicitly disable audit in teardowns
  selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path
  landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
  landlock: Demonstrate best-effort allowed_access filtering
  ...
2026-06-19 12:20:25 -07:00
..
errata landlock: Add errata documentation section 2026-02-06 17:54:43 +01:00
.kunitconfig landlock: Add unique ID generator 2025-03-26 13:59:34 +01:00
access.h landlock: Suppress logging when quiet flag is present 2026-06-14 20:17:19 +02:00
audit.c landlock: Suppress logging when quiet flag is present 2026-06-14 20:17:19 +02:00
audit.h landlock: Suppress logging when quiet flag is present 2026-06-14 20:17:19 +02:00
common.h landlock: Add support for KUnit tests 2024-02-27 11:21:45 +01:00
cred.c landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() 2026-04-07 18:50:56 +02:00
cred.h landlock: Improve kernel-doc "Return:" section consistency 2026-04-07 18:51:04 +02:00
domain.c landlock: Suppress logging when quiet flag is present 2026-06-14 20:17:19 +02:00
domain.h landlock: Suppress logging when quiet flag is present 2026-06-14 20:17:19 +02:00
errata.h landlock: Prepare to add second errata 2025-03-21 12:12:21 +01:00
fs.c Landlock update for v7.2-rc1 2026-06-19 12:20:25 -07:00
fs.h landlock: Suppress logging when quiet flag is present 2026-06-14 20:17:19 +02:00
id.c landlock: Improve kernel-doc "Return:" section consistency 2026-04-07 18:51:04 +02:00
id.h landlock: Add unique ID generator 2025-03-26 13:59:34 +01:00
Kconfig landlock: Add support for KUnit tests 2024-02-27 11:21:45 +01:00
limits.h landlock: Add a place for flags to layer rules 2026-06-14 20:17:18 +02:00
Makefile landlock: Multithreading support for landlock_restrict_self() 2026-02-06 17:54:37 +01:00
net.c landlock: Add API support and docs for the quiet flags 2026-06-14 20:17:19 +02:00
net.h landlock: Add API support and docs for the quiet flags 2026-06-14 20:17:19 +02:00
object.c treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
object.h landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
ruleset.c landlock: Add API support and docs for the quiet flags 2026-06-14 20:17:19 +02:00
ruleset.h landlock: Add API support and docs for the quiet flags 2026-06-14 20:17:19 +02:00
setup.c lsm: replace the name field with a pointer to the lsm_id struct 2025-10-22 19:24:18 -04:00
setup.h landlock: Add the errata interface 2025-03-21 12:12:19 +01:00
syscalls.c landlock: Add API support and docs for the quiet flags 2026-06-14 20:17:19 +02:00
task.c landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path 2026-06-13 23:14:59 +02:00
task.h landlock: Rename "ptrace" files to "task" 2024-03-08 18:22:16 +01:00
tsync.c landlock: Fix formatting in tsync.c 2026-04-07 18:51:04 +02:00
tsync.h landlock: Multithreading support for landlock_restrict_self() 2026-02-06 17:54:37 +01:00