|
|
Subscribe / Log in / New account

Landlock: Disconnected directory handling

From:  Mickaël Salaün <mic-AT-digikod.net>
To:  Günther Noack <gnoack-AT-google.com>, Tingmao Wang <m-AT-maowtm.org>
Subject:  [PATCH v2 0/3] Landlock: Disconnected directory handling
Date:  Fri, 11 Jul 2025 21:19:32 +0200
Message-ID:  <20250711191938.2007175-1-mic@digikod.net>
Cc:  Mickaël Salaün <mic-AT-digikod.net>, Al Viro <viro-AT-zeniv.linux.org.uk>, Ben Scarlato <akhna-AT-google.com>, Christian Brauner <brauner-AT-kernel.org>, Daniel Burgener <dburgener-AT-linux.microsoft.com>, Jann Horn <jannh-AT-google.com>, Jeff Xu <jeffxu-AT-google.com>, NeilBrown <neil-AT-brown.name>, Paul Moore <paul-AT-paul-moore.com>, Song Liu <song-AT-kernel.org>, linux-fsdevel-AT-vger.kernel.org, linux-security-module-AT-vger.kernel.org
Archive-link:  Article

Hi,

This patch series fixes and test Landlock's handling of disconnected
directories.

This second version fixes initial reset access rights to not wrongfully
deny some requests.  Also, a lot of tests are added to improve coverage
and check edge cases.

Previous version:
v1: https://lore.kernel.org/r/20250701183812.3201231-1-mic@di...

Regards,

Mickaël Salaün (2):
  landlock: Fix handling of disconnected directories
  selftests/landlock: Add disconnected leafs and branch test suites

Tingmao Wang (1):
  selftests/landlock: Add tests for access through disconnected paths

 fs/namei.c                                 |    2 +-
 include/linux/fs.h                         |    1 +
 security/landlock/errata/abi-1.h           |   16 +
 security/landlock/fs.c                     |  124 +-
 tools/testing/selftests/landlock/fs_test.c | 1317 +++++++++++++++++++-
 5 files changed, 1432 insertions(+), 28 deletions(-)
 create mode 100644 security/landlock/errata/abi-1.h

-- 
2.50.1




Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds