diff options
| author | Mickaël Salaün <mic@digikod.net> | 2025-03-18 17:14:38 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-04-20 10:15:55 +0200 |
| commit | 7dd7f87e0711ed495ec3988ef42066ac9b73aa59 (patch) | |
| tree | d4b9cc0fc6771e0b8a8d13d09c8b85824acc72da /security | |
| parent | ea980ea4d18acaaf0b795690c9b6f9d9df6c342d (diff) | |
| download | linux-7dd7f87e0711ed495ec3988ef42066ac9b73aa59.tar.gz linux-7dd7f87e0711ed495ec3988ef42066ac9b73aa59.tar.bz2 linux-7dd7f87e0711ed495ec3988ef42066ac9b73aa59.zip | |
landlock: Add erratum for TCP fix
commit 48fce74fe209ba9e9b416d7100ccee546edc9fc6 upstream.
Add erratum for the TCP socket identification fixed with commit
854277e2cc8c ("landlock: Fix non-TCP sockets restriction").
Fixes: 854277e2cc8c ("landlock: Fix non-TCP sockets restriction")
Cc: Günther Noack <gnoack@google.com>
Cc: Mikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20250318161443.279194-4-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'security')
| -rw-r--r-- | security/landlock/errata/abi-4.h | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/security/landlock/errata/abi-4.h b/security/landlock/errata/abi-4.h new file mode 100644 index 000000000000..c052ee54f89f --- /dev/null +++ b/security/landlock/errata/abi-4.h @@ -0,0 +1,15 @@ +/* SPDX-License-Identifier: GPL-2.0-only */ + +/** + * DOC: erratum_1 + * + * Erratum 1: TCP socket identification + * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + * + * This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC, + * MPTCP, or SCTP) were incorrectly restricted by TCP access rights during + * :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures + * that only TCP sockets are subject to TCP access rights, allowing other + * protocols to operate without unnecessary restrictions. + */ +LANDLOCK_ERRATUM(1) |