Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Mickaël Salaün 6955fd3a6f landlock: Add the errata interface ... commit 15383a0d63 upstream. Some fixes may require user space to check if they are applied on the running kernel before using a specific feature. For instance, this applies when a restriction was previously too restrictive and is now getting relaxed (e.g. for compatibility reasons). However, non-visible changes for legitimate use (e.g. security fixes) do not require an erratum. Because fixes are backported down to a specific Landlock ABI, we need a way to avoid cherry-pick conflicts. The solution is to only update a file related to the lower ABI impacted by this issue. All the ABI files are then used to create a bitmask of fixes. The new errata interface is similar to the one used to get the supported Landlock ABI version, but it returns a bitmask instead because the order of fixes may not match the order of versions, and not all fixes may apply to all versions. The actual errata will come with dedicated commits. The description is not actually used in the code but serves as documentation. Create the landlock_abi_version symbol and use its value to check errata consistency. Update test_base's create_ruleset_checks_ordering tests and add errata tests. This commit is backportable down to the first version of Landlock. Fixes: 3532b0b435 ("landlock: Enable user space to infer supported features") Cc: Günther Noack <gnoack@google.com> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20250318161443.279194-3-mic@digikod.net Signed-off-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2025-05-02 07:44:20 +02:00
..
asm-generic	syscalls: fix compat_sys_io_pgetevents_time64 usage	2024-07-05 09:14:50 +02:00
drm	drm/fourcc: Add packed 10bit YUV 4:2:0 format	2022-12-31 13:14:10 +01:00
linux	landlock: Add the errata interface	2025-05-02 07:44:20 +02:00
misc	habanalabs: fix resetting args in wait for CS IOCTL	2021-09-29 12:18:48 +03:00
mtd	mtd: add OTP (one-time-programmable) erase ioctl	2021-03-28 19:24:54 +02:00
rdma	RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey	2022-10-26 12:35:03 +02:00
scsi	scsi: fc: Add EDC ELS definition	2021-08-24 22:56:33 -04:00
sound	ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg	2023-05-30 13:55:33 +01:00
video	License cleanup: add SPDX license identifier to uapi header files with a license	2017-11-02 11:20:11 +01:00
xen	xen/gntdev: gntdev.h: drop a duplicated word	2020-08-03 07:46:42 +02:00
Kbuild	kbuild: re-implement Makefile.headersinst without recursion	2019-06-15 19:57:02 +09:00