[GIT PULL] Landlock fix for v6.14-rc5

From: Mickaël Salaün
Date: Wed Feb 26 2025 - 11:33:21 EST


Hi Linus,

This PR fixes TCP socket identification, documentation, and tests.

Please pull these changes for v6.14-rc5 . These commits merge cleanly with
your master branch. The kernel code has been tested in the latest linux-next
releases for two weeks and rebased to update commit messages.

Test coverage for security/landlock is 92.8% of 1035 lines according to
gcc/gcov-14, and it was the same before this PR.

Regards,
Mickaël

--
The following changes since commit a64dcfb451e254085a7daee5fe51bf22959d52d3:

Linux 6.14-rc2 (2025-02-09 12:45:03 -0800)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.14-rc5

for you to fetch changes up to 78332fdb956f18accfbca5993b10c5ed69f00a2c:

selftests/landlock: Add binaries to .gitignore (2025-02-14 09:23:11 +0100)

----------------------------------------------------------------
Landlock fix for v6.14-rc5

----------------------------------------------------------------
Bharadwaj Raju (1):
selftests/landlock: Add binaries to .gitignore

Günther Noack (1):
landlock: Minor typo and grammar fixes in IPC scoping documentation

Mickaël Salaün (1):
selftests/landlock: Enable the new CONFIG_AF_UNIX_OOB

Mikhail Ivanov (3):
landlock: Fix non-TCP sockets restriction
selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
selftests/landlock: Test that MPTCP actions are not restricted

Tanya Agarwal (1):
landlock: Fix grammar error

Documentation/userspace-api/landlock.rst | 6 +-
include/uapi/linux/landlock.h | 8 +-
security/landlock/net.c | 3 +-
security/landlock/ruleset.c | 2 +-
tools/testing/selftests/landlock/.gitignore | 2 +
tools/testing/selftests/landlock/common.h | 1 +
tools/testing/selftests/landlock/config | 3 +
tools/testing/selftests/landlock/net_test.c | 124 ++++++++++++++++++++++++----
8 files changed, 127 insertions(+), 22 deletions(-)