From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp-190b.mail.infomaniak.ch (smtp-190b.mail.infomaniak.ch [185.125.25.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DD573313537 for ; Wed, 26 Nov 2025 19:27:24 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=185.125.25.11 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764185248; cv=none; b=Sd2laukOH5314mnJj0TaW2vWCkpW4H8HZEpf9kmg2EXuzKkZerYcx7+ppVTUC1nW+JGalodaeA0G0J7Mcl9KDZfMybl6WsQvFWxMJIcrn308yAN9kSV1GTlgekuSsp5ZtwCuRHN+s38E/UT1mfr/OIkF+pWWQz3zJAr8gllT83g= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764185248; c=relaxed/simple; bh=Cwoq2ma9ZZxfqmgLgzptaFPoWzYAqQ4SZkGO42dhMyw=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=F8F2Vn03KYcQcCWmvtjVbuSS+vpJ2HAzvHmZql0AcvjFpVxITC7bhH0dOF5OB6AuL/IrD8Wb9Q/UNuKjWnUIeC0j7l4OhhHjJAvPzVP94jSBnl9uMfNynmayGGNPM0hzzqXSs0rtnMS0/cwd6r1p7K0prysg5AGcOVF0w+f1riU= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=digikod.net; spf=pass smtp.mailfrom=digikod.net; dkim=pass (1024-bit key) header.d=digikod.net header.i=@digikod.net header.b=tj3LzkvG; arc=none smtp.client-ip=185.125.25.11 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=digikod.net Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=digikod.net Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=digikod.net header.i=@digikod.net header.b="tj3LzkvG" Received: from smtp-4-0001.mail.infomaniak.ch (unknown [IPv6:2001:1600:7:10::a6c]) by smtp-4-3000.mail.infomaniak.ch (Postfix) with ESMTPS id 4dGq1b4N9dzf94; Wed, 26 Nov 2025 20:12:03 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digikod.net; s=20191114; t=1764184323; bh=vTKBVYOCE/I20IjvfX+o3ThluEwSnb226Eg4T2+sfJk=; h=From:To:Cc:Subject:Date:From; b=tj3LzkvGbUxqq6fI87oyh8wkDAz1TcMk/cVkRflY5PAQEz/knvP76J8x4nZySnxBS 7tb1EyZXuy9SV1/sjyYDWzjDzfgWPJYdZeZ9JP0qKsJt/arLxgVJBibKOWRTijNXOg xftdPtamlXYSm+HozRUySm9nOe393n0oYLn1Jbv4= Received: from unknown by smtp-4-0001.mail.infomaniak.ch (Postfix) with ESMTPA id 4dGq1Z3zLfzVxJ; Wed, 26 Nov 2025 20:12:02 +0100 (CET) From: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= To: =?UTF-8?q?G=C3=BCnther=20Noack?= , Tingmao Wang Cc: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , Al Viro , Ben Scarlato , Christian Brauner , Jann Horn , Jeff Xu , Justin Suess , Mikhail Ivanov , Paul Moore , Song Liu , linux-fsdevel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [PATCH v4 0/4] Landlock: Disconnected directory handling Date: Wed, 26 Nov 2025 20:11:53 +0100 Message-ID: <20251126191159.3530363-1-mic@digikod.net> Precedence: bulk X-Mailing-List: linux-security-module@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Infomaniak-Routing: alpha Hi, This patch series fixes and test Landlock's handling of disconnected directories. This fourth version implements an hybrid version of disconnected directory handling, simpler and safer, suggested by Tingmao. One patch was merged, and a new one improve variable scope. Previous versions: v3: https://lore.kernel.org/r/20250719104204.545188-1-mic@digikod.net v2: https://lore.kernel.org/r/20250711191938.2007175-1-mic@digikod.net v1: https://lore.kernel.org/r/20250701183812.3201231-1-mic@digikod.net Regards, Mickaël Salaün (3): landlock: Fix handling of disconnected directories landlock: Improve variable scope selftests/landlock: Add disconnected leafs and branch test suites Tingmao Wang (1): selftests/landlock: Add tests for access through disconnected paths security/landlock/errata/abi-1.h | 16 + security/landlock/fs.c | 43 +- tools/testing/selftests/landlock/fs_test.c | 1335 +++++++++++++++++++- 3 files changed, 1373 insertions(+), 21 deletions(-) create mode 100644 security/landlock/errata/abi-1.h -- 2.51.0