[GIT PULL] Landlock fix for v6.19-rc6

[GIT PULL] Landlock fix for v6.19-rc6

[Mickaël Salaün]

Hi,

This PR fixes TCP handling, tests, documentation, non-audit elided code,
and minor cosmetic changes.

Please pull these changes for v6.19-rc6 .  These commits merge cleanly
with your master branch.  The kernel changes have been tested in the
latest linux-next releases for some weeks.

Test coverage for security/landlock is 91.9% of 1933 lines according to
LLVM 21, and it was 92.1% of 1927 lines before this PR.

Regards,
 Mickaël

--
The following changes since commit 8f0b4cce4481fb22653697cced8d0d04027cb1e8:

  Linux 6.19-rc1 (2025-12-14 16:05:07 +1200)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc6

for you to fetch changes up to 6abbb8703aeeb645a681ab6ad155e0b450413787:

  landlock: Clarify documentation for the IOCTL access right (2026-01-12 17:07:21 +0100)

----------------------------------------------------------------
Landlock fix for v6.19-rc6

----------------------------------------------------------------
Günther Noack (2):
      selftests/landlock: Properly close a file descriptor
      landlock: Clarify documentation for the IOCTL access right

Matthieu Buffet (5):
      landlock: Fix TCP handling of short AF_UNSPEC addresses
      selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
      selftests/landlock: Add missing connect(minimal AF_UNSPEC) test
      selftests/landlock: Remove invalid unix socket bind()
      selftests/landlock: NULL-terminate unix pathname addresses

Mickaël Salaün (6):
      landlock: Fix formatting
      landlock: Remove useless include
      landlock: Improve erratum documentation
      landlock: Clean up hook_ptrace_access_check()
      landlock: Fix spelling
      landlock: Optimize stack usage when !CONFIG_AUDIT

Tingmao Wang (5):
      landlock: Fix wrong type usage
      selftests/landlock: Fix typo in fs_test
      selftests/landlock: Fix missing semicolon
      selftests/landlock: Use scoped_base_variants.h for ptrace_test
      landlock: Improve the comment for domain_is_scoped

 include/uapi/linux/landlock.h                      |  37 +++--
 security/landlock/audit.c                          |   2 +-
 security/landlock/domain.h                         |   2 +-
 security/landlock/errata/abi-6.h                   |   2 +-
 security/landlock/fs.c                             |  14 +-
 security/landlock/net.c                            | 118 +++++++++-------
 security/landlock/ruleset.c                        |   1 -
 security/landlock/task.c                           |  12 +-
 tools/testing/selftests/landlock/common.h          |   1 +
 tools/testing/selftests/landlock/fs_test.c         |  34 ++---
 tools/testing/selftests/landlock/net_test.c        |  30 +++-
 tools/testing/selftests/landlock/ptrace_test.c     | 154 +--------------------
 .../selftests/landlock/scoped_abstract_unix_test.c |  23 ++-
 .../selftests/landlock/scoped_base_variants.h      |   9 +-
 14 files changed, 170 insertions(+), 269 deletions(-)

Re: [GIT PULL] Landlock fix for v6.19-rc6

[Linus Torvalds]

On Thu, 15 Jan 2026 at 13:47, Mickaël Salaün <mic@digikod.net> wrote:
>
> This PR fixes TCP handling, tests, documentation, non-audit elided code,
> and minor cosmetic changes.

This seems significantly bigger than what you sent for the whole merge
window for the Landlock code.

The merge window pull was - ignoring tests - 4 files changed, 59
insertions(+), 17 deletions(-).

I want more explanations for why I'm suddenly getting more alleged
fixes than I got any development and why this shouldn't wait until the
next merge window.

Because honestly, this just all seems out of place.

            Linus

Re: [GIT PULL] Landlock fix for v6.19-rc6

[Mickaël Salaün]

On Thu, Jan 15, 2026 at 03:09:34PM -0800, Linus Torvalds wrote:
> On Thu, 15 Jan 2026 at 13:47, Mickaël Salaün <mic@digikod.net> wrote:
> >
> > This PR fixes TCP handling, tests, documentation, non-audit elided code,
> > and minor cosmetic changes.
> 
> This seems significantly bigger than what you sent for the whole merge
> window for the Landlock code.
> 
> The merge window pull was - ignoring tests - 4 files changed, 59
> insertions(+), 17 deletions(-).
> 
> I want more explanations for why I'm suddenly getting more alleged
> fixes than I got any development and why this shouldn't wait until the
> next merge window.
> 
> Because honestly, this just all seems out of place.

There are indeed relatively more line changes because the related
commits are fixes for different kernel versions, not specifically v6.19
but also v6.15 (type issue), v6.7 (TCP fix), and it required to move a
lot of lines (including a lot of comments) for a theoretically small
fix.  In fact, the last merge window pull was mostly about fixes too
(which were on time for the merge window, but otherwise I would have
sent them as this one).

The other commits are documentation/comment fixes (including another
chunk of moved lines, which appears as kernel code diff), tests fixes or
minor cleanup.  I can postpone these commits but because they don't
directly impact the kernel, I wanted to group all fixes and minor
non-kernel changes together to have a clean PR for the next merge
window.  Please let me know what you prefer.

 Mickaël

Re: [GIT PULL] Landlock fix for v6.19-rc6

[Linus Torvalds]

On Fri, 16 Jan 2026 at 06:18, Mickaël Salaün <mic@digikod.net> wrote:
>
>  Please let me know what you prefer.

Ok, I took a closer look, and yeah, it's mostly just moved lines that
made it all look rather big for this stage of the release, so I've
pulled it as-is.

I do think some of them could have been delayed, but ..

            Linus

Re: [GIT PULL] Landlock fix for v6.19-rc6

[pr-tracker-bot]

The pull request you sent on Thu, 15 Jan 2026 22:47:40 +0100:

> https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc6

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/90a855e75a99f2932b19f4d04bac1edef158d95e

Thank you!

-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html