Hello! This patch fixes incorrect restriction of non-TCP bind/connect actions. There is two commits that extend TCP tests with MPTCP test suits and IPPROTO_TCP test suits. Closes: https://github.com/landlock-lsm/linux/issues/40 General changes after v2 ======================== * Rebases on current linux-mic/next * Extracts non-TCP restriction fix into separate patchset Previous versions ================= v2: https://lore.kernel.org/all/20241017110454.265818-1-ivanov.mikhail1@xxxxxxxxxxxxxxxxxxx/ v1: https://lore.kernel.org/all/20241003143932.2431249-1-ivanov.mikhail1@xxxxxxxxxxxxxxxxxxx/ Mikhail Ivanov (3): landlock: Fix non-TCP sockets restriction selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP selftests/landlock: Test that MPTCP actions are not restricted security/landlock/net.c | 3 +- tools/testing/selftests/landlock/common.h | 1 + tools/testing/selftests/landlock/config | 2 + tools/testing/selftests/landlock/net_test.c | 124 +++++++++++++++++--- 4 files changed, 114 insertions(+), 16 deletions(-) base-commit: 24a8e44deae4b549b0fe5fbb271fe8d169f0933f -- 2.34.1
