From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp-8fad.mail.infomaniak.ch (smtp-8fad.mail.infomaniak.ch [83.166.143.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4B7BE1DF25C for ; Fri, 11 Jul 2025 19:20:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=83.166.143.173 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1752261610; cv=none; b=Q/diiemdKyBqwuf/7haEZYY2M+NzRG79QF6xD8YDfIlZJDC+T4zHJ2ptQWLhvfnyWkKT7Nn5oKbKg5gbzZ5Y5OOA7MBsChH7m9kEmOS6zafc2KIG/TJOhn9V4PlkNR5PoT2/bJGeDflPBxDZCeiBRtpCqsxtObSGGDPcvrgUoQ4= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1752261610; c=relaxed/simple; bh=nfrBas3+tC4+wyryUZlyqW+BnLEfrE6Z9dkDddwyLdU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=G0x2Kb07YnQ9wXDMiaC2kYzik1Exw1T3rbBvkJ/JCwoDkhOgO737A9VKCo83c89WD3yUL2x8DwDJtzie7vxuLPuc9wstvH52nsmUyt6uSFNZBxVCM8+Sqxq5XjC4Vz64+MjaCaASsaYcx26Lwa4jgOv6owOjRQ3Cr/mqE6FS7SY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=digikod.net; spf=pass smtp.mailfrom=digikod.net; dkim=pass (1024-bit key) header.d=digikod.net header.i=@digikod.net header.b=z175gQpo; arc=none smtp.client-ip=83.166.143.173 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=digikod.net Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=digikod.net Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=digikod.net header.i=@digikod.net header.b="z175gQpo" Received: from smtp-4-0000.mail.infomaniak.ch (smtp-4-0000.mail.infomaniak.ch [10.7.10.107]) by smtp-4-3000.mail.infomaniak.ch (Postfix) with ESMTPS id 4bf1kN0yp5zNHp; Fri, 11 Jul 2025 21:19:56 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digikod.net; s=20191114; t=1752261596; bh=s6LMdhlLzq+Om1yenjXuqcSNzbRMr+2AP8W0jPDUv1g=; h=From:To:Cc:Subject:Date:From; b=z175gQpohRTzvaav/hd3/A4/0tCZmMZbVlO0EeAPjJ3giLmQURBMEzskxu+HLp/iV 64XvJC4G4a55ZuFReb0/AAGDTWSHfrjwhsxwQ6qtFSw3LCnxtGVpbv10LeQ4nL+Qko swZ4SOE30ag07NNJGAgtOuEiWtQwNZ86oY6OoGL8= Received: from unknown by smtp-4-0000.mail.infomaniak.ch (Postfix) with ESMTPA id 4bf1kM2T78zKjt; Fri, 11 Jul 2025 21:19:55 +0200 (CEST) From: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= To: =?UTF-8?q?G=C3=BCnther=20Noack?= , Tingmao Wang Cc: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , Al Viro , Ben Scarlato , Christian Brauner , Daniel Burgener , Jann Horn , Jeff Xu , NeilBrown , Paul Moore , Song Liu , linux-fsdevel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [PATCH v2 0/3] Landlock: Disconnected directory handling Date: Fri, 11 Jul 2025 21:19:32 +0200 Message-ID: <20250711191938.2007175-1-mic@digikod.net> Precedence: bulk X-Mailing-List: linux-security-module@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Infomaniak-Routing: alpha Hi, This patch series fixes and test Landlock's handling of disconnected directories. This second version fixes initial reset access rights to not wrongfully deny some requests. Also, a lot of tests are added to improve coverage and check edge cases. Previous version: v1: https://lore.kernel.org/r/20250701183812.3201231-1-mic@digikod.net Regards, Mickaël Salaün (2): landlock: Fix handling of disconnected directories selftests/landlock: Add disconnected leafs and branch test suites Tingmao Wang (1): selftests/landlock: Add tests for access through disconnected paths fs/namei.c | 2 +- include/linux/fs.h | 1 + security/landlock/errata/abi-1.h | 16 + security/landlock/fs.c | 124 +- tools/testing/selftests/landlock/fs_test.c | 1317 +++++++++++++++++++- 5 files changed, 1432 insertions(+), 28 deletions(-) create mode 100644 security/landlock/errata/abi-1.h -- 2.50.1