Unverified Commit 48fce74f authored by Mickaël Salaün's avatar Mickaël Salaün
Browse files

landlock: Add erratum for TCP fix 

Add erratum for the TCP socket identification fixed with commit
854277e2 ("landlock: Fix non-TCP sockets restriction").

Fixes: 854277e2 ("landlock: Fix non-TCP sockets restriction")
Cc: Günther Noack <gnoack@google.com>
Cc: Mikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20250318161443.279194-4-mic@digikod.net


Signed-off-by: default avatarMickaël Salaün <mic@digikod.net>
parent 15383a0d

security/landlock/errata/abi-4.h

0 → 100644
+15 −0
Original line number Diff line number Diff line 
/* SPDX-License-Identifier: GPL-2.0-only */



/**

 * DOC: erratum_1

 *

 * Erratum 1: TCP socket identification

 * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 *

 * This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC,

 * MPTCP, or SCTP) were incorrectly restricted by TCP access rights during

 * :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures

 * that only TCP sockets are subject to TCP access rights, allowing other

 * protocols to operate without unnecessary restrictions.

 */

LANDLOCK_ERRATUM(1)