Received: by 2002:a05:7412:98c1:b0:fa:551:50a7 with SMTP id kc1csp1566143rdb; Mon, 8 Jan 2024 03:34:11 -0800 (PST) X-Google-Smtp-Source: AGHT+IE3WTqdQK+J3wD3Xc7twe/B76l23zO1Nvn5LBvXrG7i5xicT8dqdgeMOiHwHPdkqD/JRqnB X-Received: by 2002:a05:6a20:394e:b0:199:3297:127e with SMTP id r14-20020a056a20394e00b001993297127emr4466276pzg.64.1704713650854; Mon, 08 Jan 2024 03:34:10 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1704713650; cv=none; d=google.com; s=arc-20160816; b=ZItRminrbXKwlitfB0sZqJnNSwLOfRlv8sAcfwYDwzImK5AnCcKx0GW3USNbpfabVb r9P+PuVQmxeVwDh9Khgobf1suKN9/qWRGA0QkBCluphIML2p7k15IeMqHjv8w36hfK/6 I1Yqy8XD9cvkka/1c0bAOueFw7PDnWnX7osO9401cISXIOoDkP+j4ZJ5ax6vib0IIoyv MHIHSUs2plwTFuDeHjKIduZ1JaH/BZI5V9VTb/Ffc9HnT+1xG7eFPOZJyqxJ6teS6OD2 eYLTqUxcIA6MhvAning25fjFOnoDP2DDG+dmHc1rjr8lxXTottB+IdT6Kb3U++OO/7tA ynfg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:message-id:date:subject:cc:to :from:dkim-signature; bh=JNJB6NuaGt/PLjRCPx9x+neA49tU6ZpQ4pyI2Cyx0dY=; fh=tNVdgP5I3AXBWbpmeaeJ8uGwINT1ZCByBgzV0M3EFf4=; b=UQAY9qlkcp0ZeVXERmlmya0vo/C9wEuM3E10DjBpxuCjOFoAwV5nT0fDPP8kffc312 As9bHq+7abMLk9u6QsSquu75Nr5rESUgniaMZsuOFxrzl0ca519C3DejXBHeGYadxV0J YQzCHUNykC1IxIfLdl2M9WK6ZqnGkQ+xtI2ijcVfDwKsz11uoNkNcCC6330sLjYoMVB3 ziwITZz41C8roAp0PoQuEcfm9veH17ind7zBEYBm74jXMoZEXUf8Xyh8btkbYXUOmEc3 Hyd6Qg/ji3y3lsE3idWOLeVX6DatvnbJ4ifWFLpZ6AlU7MU9D3/3OpFRpz35OniqIiH/ 1ZHg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@digikod.net header.s=20191114 header.b=0FC1hU3u; spf=pass (google.com: domain of linux-kernel+bounces-19437-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) smtp.mailfrom="linux-kernel+bounces-19437-linux.lists.archive=gmail.com@vger.kernel.org" Return-Path: Received: from sy.mirrors.kernel.org (sy.mirrors.kernel.org. [147.75.48.161]) by mx.google.com with ESMTPS id f12-20020a63f74c000000b005cd7bb0c68asi5962471pgk.177.2024.01.08.03.34.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 08 Jan 2024 03:34:10 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-19437-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) client-ip=147.75.48.161; Authentication-Results: mx.google.com; dkim=pass header.i=@digikod.net header.s=20191114 header.b=0FC1hU3u; spf=pass (google.com: domain of linux-kernel+bounces-19437-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) smtp.mailfrom="linux-kernel+bounces-19437-linux.lists.archive=gmail.com@vger.kernel.org" Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sy.mirrors.kernel.org (Postfix) with ESMTPS id AB12EB20A77 for ; Mon, 8 Jan 2024 11:33:45 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 0738614AAD; Mon, 8 Jan 2024 11:33:38 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=digikod.net header.i=@digikod.net header.b="0FC1hU3u" X-Original-To: linux-kernel@vger.kernel.org Received: from smtp-bc0e.mail.infomaniak.ch (smtp-bc0e.mail.infomaniak.ch [45.157.188.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 60CAF2575B for ; Mon, 8 Jan 2024 11:33:30 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=digikod.net Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=digikod.net Received: from smtp-3-0000.mail.infomaniak.ch (unknown [10.4.36.107]) by smtp-3-3000.mail.infomaniak.ch (Postfix) with ESMTPS id 4T7sPv2N0JzMpnPR; Mon, 8 Jan 2024 11:33:23 +0000 (UTC) Received: from unknown by smtp-3-0000.mail.infomaniak.ch (Postfix) with ESMTPA id 4T7sPt4bsHzsJ; Mon, 8 Jan 2024 12:33:22 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=digikod.net; s=20191114; t=1704713603; bh=InkQS/SgGv/BxlTjsZAmTXYbqz2CdOrb9eJn7eQSusY=; h=From:To:Cc:Subject:Date:From; b=0FC1hU3uppeCBcyFr9Tzz6g5FFwOI1Qq+IY7BYeznTAYHGtgEgNaD6Qs4EC7CdL/m OShEgFeqP1oNP6hNQTkCUb8ozK9OrjmJtVROTlBpyGhWFiduygBwNaUjL5ZEkALErC LBG6rdv3LXX9Co6u615njW/dfBpjQKIJXDYBkAaE= From: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= To: Linus Torvalds Cc: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , =?UTF-8?q?G=C3=BCnther=20Noack?= , Paul Moore , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [GIT PULL] Landlock updates for v6.8 Date: Mon, 8 Jan 2024 12:33:11 +0100 Message-ID: <20240108113311.192252-1-mic@digikod.net> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Infomaniak-Routing: alpha Hi Linus, This PR adds new tests, a slight optimization, and some cosmetic changes. Please pull these changes for v6.8-rc1. These 7 commits merged cleanly with your master branch. The kernel code has been tested in the latest linux-next releases for a few weeks. I rebased the latest patches with updated descriptions though. Test coverage for security/landlock is 92.4% of 710 lines according to gcc/gcov-13, same as before because only semantic tests are added. Regards, Mickaël -- The following changes since commit b85ea95d086471afb4ad062012a4d73cd328fa86: Linux 6.7-rc1 (2023-11-12 16:19:07 -0800) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.8-rc1 for you to fetch changes up to 0daaa610c8e033cdfb420db728c2b40eb3a75134: landlock: Optimize the number of calls to get_access_mask slightly (2024-01-03 12:43:17 +0100) ---------------------------------------------------------------- Landlock updates for v6.8-rc1 ---------------------------------------------------------------- Günther Noack (5): landlock: Remove remaining "inline" modifiers in .c files [v5.15] landlock: Remove remaining "inline" modifiers in .c files [v6.1] landlock: Remove remaining "inline" modifiers in .c files [v6.6] selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests landlock: Optimize the number of calls to get_access_mask slightly Mickaël Salaün (2): selftests/landlock: Add tests to check unknown rule's access rights selftests/landlock: Add tests to check unhandled rule's access rights security/landlock/fs.c | 26 +++++----- security/landlock/ruleset.c | 7 +-- tools/testing/selftests/landlock/fs_test.c | 80 +++++++++++++++++++++++++---- tools/testing/selftests/landlock/net_test.c | 59 ++++++++++++++++++++- 4 files changed, 145 insertions(+), 27 deletions(-)