Re: [PATCH 0/3] Add Landlock UDP support documentation

["Mickaël Salaün" <mic@digikod.net>]

On Thu, Sep 17, 2026 at 09:58:49AM +0200, Matthieu Buffet wrote:
> Hi Alejandro, Mickaël, Günther,
> 
> Here is a small update to landlock.7 and landlock_add_rule.2 to add
> missing TCP info, and add UDP specifics introduced in kernels 7.2+.
> With the benefit of hindsight, re-reading UAPI header changes, I
> actually did a bit more than copy-pasting from them (see patch 3/3):
> - explicitly state in the access right description that sending
>   datagrams without a destination does not require any access right
> - more importantly: clarify the description of the most non-trivial
>   behaviour (auto-bind denials when emitting, which can occur even if
>   CONNECT_SEND_UDP is not handled)

Thanks for the patches!

> Mickaël, if you are okay with these additions, would you like them in a
> UAPI header patch to sync the two?

Yes please.

> 
> Have a nice day!
> 
> Link: <https://github.com/landlock-lsm/linux/issues/66>
> 
> Matthieu Buffet (3):
>   man/man2/landlock_add_rule.2: Clarify ephemeral port range
>   man/man7/landlock.7: Document AF_UNSPEC behaviour and error codes
>   man/man7/landlock.7, man/man2/landlock_add_rule.2: Document UDP
>     support
> 
>  man/man2/landlock_add_rule.2 | 23 +++++++---
>  man/man7/landlock.7          | 88 ++++++++++++++++++++++++++++++++++--
>  2 files changed, 102 insertions(+), 9 deletions(-)
> 
> 
> base-commit: dbc7211e1e52dcd485bd3e081cfa761506edc4e9
> -- 
> 2.47.3
>