Thanks Mikhail, it's been in my tree for more than 10 days, I'll include it in a fix PR next week. On Wed, Feb 05, 2025 at 05:36:48PM +0800, Mikhail Ivanov wrote: > Hello! > > This patch fixes incorrect restriction of non-TCP bind/connect actions. > There is two commits that extend TCP tests with MPTCP test suits and > IPPROTO_TCP test suits. > > Closes: https://github.com/landlock-lsm/linux/issues/40 > > General changes after v2 > ======================== > * Rebases on current linux-mic/next > * Extracts non-TCP restriction fix into separate patchset > > Previous versions > ================= > v2: https://lore.kernel.org/all/20241017110454.265818-1-ivanov.mikhail1@xxxxxxxxxxxxxxxxxxx/ > v1: https://lore.kernel.org/all/20241003143932.2431249-1-ivanov.mikhail1@xxxxxxxxxxxxxxxxxxx/ > > Mikhail Ivanov (3): > landlock: Fix non-TCP sockets restriction > selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP > selftests/landlock: Test that MPTCP actions are not restricted > > security/landlock/net.c | 3 +- > tools/testing/selftests/landlock/common.h | 1 + > tools/testing/selftests/landlock/config | 2 + > tools/testing/selftests/landlock/net_test.c | 124 +++++++++++++++++--- > 4 files changed, 114 insertions(+), 16 deletions(-) > > > base-commit: 24a8e44deae4b549b0fe5fbb271fe8d169f0933f > -- > 2.34.1 > >
