Landlock: Disconnected directory handling [LWN.net]

From:		Mickaël Salaün <mic-AT-digikod.net>
To:		Günther Noack <gnoack-AT-google.com>, Tingmao Wang <m-AT-maowtm.org>
Subject:		[PATCH v4 0/4] Landlock: Disconnected directory handling
Date:		Wed, 26 Nov 2025 20:11:53 +0100
Message-ID:		<20251126191159.3530363-1-mic@digikod.net>
Cc:		Mickaël Salaün <mic-AT-digikod.net>, Al Viro <viro-AT-zeniv.linux.org.uk>, Ben Scarlato <akhna-AT-google.com>, Christian Brauner <brauner-AT-kernel.org>, Jann Horn <jannh-AT-google.com>, Jeff Xu <jeffxu-AT-google.com>, Justin Suess <utilityemal77-AT-gmail.com>, Mikhail Ivanov <ivanov.mikhail1-AT-huawei-partners.com>, Paul Moore <paul-AT-paul-moore.com>, Song Liu <song-AT-kernel.org>, linux-fsdevel-AT-vger.kernel.org, linux-security-module-AT-vger.kernel.org
Archive-link:		Article

Hi,

This patch series fixes and test Landlock's handling of disconnected
directories.

This fourth version implements an hybrid version of disconnected
directory handling, simpler and safer, suggested by Tingmao.  One patch
was merged, and a new one improve variable scope.

Previous versions:
v3: https://lore.kernel.org/r/20250719104204.545188-1-mic@dig...
v2: https://lore.kernel.org/r/20250711191938.2007175-1-mic@di...
v1: https://lore.kernel.org/r/20250701183812.3201231-1-mic@di...

Regards,

Mickaël Salaün (3):
  landlock: Fix handling of disconnected directories
  landlock: Improve variable scope
  selftests/landlock: Add disconnected leafs and branch test suites

Tingmao Wang (1):
  selftests/landlock: Add tests for access through disconnected paths

 security/landlock/errata/abi-1.h           |   16 +
 security/landlock/fs.c                     |   43 +-
 tools/testing/selftests/landlock/fs_test.c | 1335 +++++++++++++++++++-
 3 files changed, 1373 insertions(+), 21 deletions(-)
 create mode 100644 security/landlock/errata/abi-1.h

-- 
2.51.0