public inbox for linux-security-module@vger.kernel.org
 help / color / mirror / Atom feed
From: "Mickaël Salaün" <mic@digikod.net>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: "Mickaël Salaün" <mic@digikod.net>, "Dan Cojocaru" <dan@dcdev.ro>,
	"Günther Noack" <gnoack@google.com>,
	"Panagiotis Ivory Vasilopoulos" <git@n0toose.net>,
	"Yihan Ding" <dingyihan@uniontech.com>,
	linux-kernel@vger.kernel.org,
	linux-security-module@vger.kernel.org
Subject: [GIT PULL] Landlock fix for v7.0-rc6
Date: Thu, 26 Mar 2026 18:27:27 +0100	[thread overview]
Message-ID: <20260326172727.119094-1-mic@digikod.net> (raw)

Hi,

This PR mainly fixes Landlock TSYNC issues related to interrupts and
unexpected task exit.  Other fixes touch documentation and sample, and a
new test extends coverage.

Please pull these changes for v7.0-rc6 .  These commits merge cleanly
with your master branch.  Kernel changes have been tested in the latest
linux-next releases for some weeks.

Test coverage for security/landlock is 91.0% of 2105 lines according to
LLVM 21, and it was (up to) 91.4% of 2093 lines before this PR.

syzkaller (also) reported the fixed issues:
- https://syzkaller.appspot.com/bug?extid=7ea2f5e9dfd468201817
- https://syzkaller.appspot.com/bug?extid=741e2278ef71fef03a10

Regards,
 Mickaël

--
The following changes since commit 11439c4635edd669ae435eec308f4ab8a0804808:

  Linux 7.0-rc2 (2026-03-01 15:39:31 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-7.0-rc6

for you to fetch changes up to a23811061a553c70c42de0e811b2ec15b2d54157:

  landlock: Expand restrict flags example for ABI version 8 (2026-03-24 20:55:55 +0100)

----------------------------------------------------------------
Landlock fix for v7.0-rc6

----------------------------------------------------------------
Günther Noack (1):
      samples/landlock: Bump ABI version to 8

Mickaël Salaün (4):
      landlock: Fix formatting
      landlock: Fully release unused TSYNC work entries
      landlock: Improve TSYNC types
      selftests/landlock: Test tsync interruption and cancellation paths

Panagiotis "Ivory" Vasilopoulos (1):
      landlock: Expand restrict flags example for ABI version 8

Yihan Ding (2):
      landlock: Serialize TSYNC thread restriction
      landlock: Clean up interrupted thread logic in TSYNC

 Documentation/userspace-api/landlock.rst      | 23 +++++--
 samples/landlock/sandboxer.c                  |  5 +-
 security/landlock/domain.c                    |  3 +-
 security/landlock/ruleset.c                   |  9 ++-
 security/landlock/tsync.c                     | 92 +++++++++++++++++++++------
 tools/testing/selftests/landlock/tsync_test.c | 91 +++++++++++++++++++++++++-
 6 files changed, 190 insertions(+), 33 deletions(-)

             reply	other threads:[~2026-03-26 17:46 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-03-26 17:27 Mickaël Salaün [this message]
2026-03-26 19:48 ` [GIT PULL] Landlock fix for v7.0-rc6 pr-tracker-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260326172727.119094-1-mic@digikod.net \
    --to=mic@digikod.net \
    --cc=dan@dcdev.ro \
    --cc=dingyihan@uniontech.com \
    --cc=git@n0toose.net \
    --cc=gnoack@google.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox