Patch Series

Subject Support socket access-control
Author ivanov.mikhail1@huawei-partners.com
Date 2025-11-18 13:46:21 +0000 UTC
Version 4
Cc artem.kuzin@huawei.com gnoack@google.com ivanov.mikhail1@huawei-partners.com konstantin.meskhidze@huawei.com linux-security-module@vger.kernel.org matthieu@buffet.re mic@digikod.net netdev@vger.kernel.org netfilter-devel@vger.kernel.org willemdebruijn.kernel@gmail.com yusongping@huawei.com

Patches (19)

Name Content [All]
[RFC PATCH v4 01/19] landlock: Support socket access-control [Body]
[RFC PATCH v4 02/19] selftests/landlock: Test creating a ruleset with unknown access [Body]
[RFC PATCH v4 03/19] selftests/landlock: Test adding a socket rule [Body]
[RFC PATCH v4 04/19] selftests/landlock: Testing adding rule with wildcard value [Body]
[RFC PATCH v4 05/19] selftests/landlock: Test acceptable ranges of socket rule key [Body]
[RFC PATCH v4 06/19] landlock: Add hook on socket creation [Body]
[RFC PATCH v4 07/19] selftests/landlock: Test basic socket restriction [Body]
[RFC PATCH v4 08/19] selftests/landlock: Test network stack error code consistency [Body]
[RFC PATCH v4 09/19] selftests/landlock: Test overlapped rulesets with rules of protocol ranges [Body]
[RFC PATCH v4 10/19] selftests/landlock: Test that kernel space sockets are not restricted [Body]
[RFC PATCH v4 11/19] selftests/landlock: Test protocol mappings [Body]
[RFC PATCH v4 12/19] selftests/landlock: Test socketpair(2) restriction [Body]
[RFC PATCH v4 13/19] selftests/landlock: Test SCTP peeloff restriction [Body]
[RFC PATCH v4 14/19] selftests/landlock: Test that accept(2) is not restricted [Body]
[RFC PATCH v4 15/19] lsm: Support logging socket common data [Body]
[RFC PATCH v4 16/19] landlock: Log socket creation denials [Body]
[RFC PATCH v4 17/19] selftests/landlock: Test socket creation denial log for audit [Body]
[RFC PATCH v4 18/19] samples/landlock: Support socket protocol restrictions [Body]
[RFC PATCH v4 19/19] landlock: Document socket rule type support [Body]

Session 2025-11-18

ID (for dev) 4deffe39-04fa-42ff-a68f-a8e9e2c1f39a
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base c9dfb92de0738eb7fe6a591ad1642333793e8b6e [Config] passed [Log]
[KASAN] Boot test: Base c9dfb92de0738eb7fe6a591ad1642333793e8b6e [Config] passed
[KASAN] Build Patched c9dfb92de0738eb7fe6a591ad1642333793e8b6e [Config] [patched] passed [Log]
[KASAN] Boot test: Patched c9dfb92de0738eb7fe6a591ad1642333793e8b6e [Config] [patched] passed
[KASAN] Fuzzing c9dfb92de0738eb7fe6a591ad1642333793e8b6e [Config] c9dfb92de0738eb7fe6a591ad1642333793e8b6e [Config] [patched] passed [Log] [Artifacts]