Received-SPF: pass (google.com: domain of linux-kernel+bounces-102316-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3;
From: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= <mic@digikod.net>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= <mic@digikod.net>,
	=?UTF-8?q?G=C3=BCnther=20Noack?= <gnoack@google.com>,
	Paul Moore <paul@paul-moore.com>,
	linux-kernel@vger.kernel.org,
	linux-security-module@vger.kernel.org
Subject: [GIT PULL] Landlock updates for v6.9
Date: Wed, 13 Mar 2024 18:53:07 +0100
Message-ID: <20240313175307.714251-1-mic@digikod.net>
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Hi Linus,

This PR brings some miscellaneous improvements, including new KUnit tests,
extended documentation and boot help, and some cosmetic cleanups.

Additional test changes already went through the net tree.

Please pull these changes for v6.9-rc1.  This commit merged cleanly with
your master branch.  The kernel code has been tested in the latest
linux-next releases for a few weeks.

Regards,
 Mickaël

--
The following changes since commit d9818b3e906a0ee1ab02ea79e74a2f755fc5461a:

  landlock: Fix asymmetric private inodes referring (2024-02-26 18:23:53 +0100)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.9-rc1

for you to fetch changes up to a17c60e533f5cd832e77e0d194e2e0bb663371b6:

  samples/landlock: Don't error out if a file path cannot be opened (2024-03-08 18:22:18 +0100)

----------------------------------------------------------------
Landlock updates for v6.9-rc1

----------------------------------------------------------------
Mickaël Salaün (8):
      selftests/landlock: Clean up error logs related to capabilities
      landlock: Add support for KUnit tests
      landlock: Extend documentation for kernel support
      landlock: Warn once if a Landlock action is requested while disabled
      landlock: Simplify current_check_access_socket()
      landlock: Rename "ptrace" files to "task"
      landlock: Use f_cred in security_file_open() hook
      samples/landlock: Don't error out if a file path cannot be opened

 Documentation/userspace-api/landlock.rst     |  59 ++++++-
 samples/landlock/sandboxer.c                 |  13 +-
 security/landlock/.kunitconfig               |   4 +
 security/landlock/Kconfig                    |  15 ++
 security/landlock/Makefile                   |   2 +-
 security/landlock/common.h                   |   2 +
 security/landlock/fs.c                       | 252 ++++++++++++++++++++++++++-
 security/landlock/net.c                      |   7 +-
 security/landlock/setup.c                    |   4 +-
 security/landlock/syscalls.c                 |  18 +-
 security/landlock/{ptrace.c => task.c}       |   4 +-
 security/landlock/{ptrace.h => task.h}       |   8 +-
 tools/testing/kunit/configs/all_tests.config |   1 +
 tools/testing/selftests/landlock/common.h    |  39 +----
 14 files changed, 363 insertions(+), 65 deletions(-)
 create mode 100644 security/landlock/.kunitconfig
 rename security/landlock/{ptrace.c => task.c} (98%)
 rename security/landlock/{ptrace.h => task.h} (52%)