[GIT PULL] Landlock update for v6.19-rc1

From: Mickaël Salaün

Date: Fri Dec 05 2025 - 13:47:25 EST


Hi,

This PR mainly fixes handling of disconnected directories and add new
tests.

Please pull these changes for v6.19-rc1 . These commits merge cleanly
with your master branch. The kernel changes have been tested in the
latest linux-next releases for some weeks (even if the last version
landed last week).

Test coverage for security/landlock is 92.1% of 1927 lines according to
LLVM 21, and it was 92.0% of 1923 lines before this PR.

A new syzkaller test has been developed for this specific case:
https://github.com/google/syzkaller/pull/6164

Regards,
Mickaël

--
The following changes since commit ac3fd01e4c1efce8f2c054cdeb2ddd2fc0fb150d:

Linux 6.18-rc7 (2025-11-23 14:53:16 -0800)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git tags/landlock-6.19-rc1

for you to fetch changes up to 54f9baf537b0a091adad860ec92e3e18e0a0754c:

selftests/landlock: Add disconnected leafs and branch test suites (2025-11-28 18:27:07 +0100)

----------------------------------------------------------------
Landlock update for v6.19-rc1

----------------------------------------------------------------
Matthieu Buffet (1):
selftests/landlock: Fix makefile header list

Mickaël Salaün (3):
landlock: Fix handling of disconnected directories
landlock: Improve variable scope
selftests/landlock: Add disconnected leafs and branch test suites

Tingmao Wang (3):
landlock: Minor comments improvements
landlock: Make docs in cred.h and domain.h visible
selftests/landlock: Add tests for access through disconnected paths

Documentation/security/landlock.rst | 11 +-
security/landlock/errata/abi-1.h | 16 +
security/landlock/fs.c | 46 +-
security/landlock/ruleset.c | 12 +-
security/landlock/ruleset.h | 2 +-
tools/testing/selftests/landlock/Makefile | 2 +-
tools/testing/selftests/landlock/fs_test.c | 1474 +++++++++++++++++++++++++++-
7 files changed, 1536 insertions(+), 27 deletions(-)
create mode 100644 security/landlock/errata/abi-1.h