Mickaël Salaün b66bc16f4c landlock: Add the errata interface ... commit 15383a0d63 upstream. Some fixes may require user space to check if they are applied on the running kernel before using a specific feature. For instance, this applies when a restriction was previously too restrictive and is now getting relaxed (e.g. for compatibility reasons). However, non-visible changes for legitimate use (e.g. security fixes) do not require an erratum. Because fixes are backported down to a specific Landlock ABI, we need a way to avoid cherry-pick conflicts. The solution is to only update a file related to the lower ABI impacted by this issue. All the ABI files are then used to create a bitmask of fixes. The new errata interface is similar to the one used to get the supported Landlock ABI version, but it returns a bitmask instead because the order of fixes may not match the order of versions, and not all fixes may apply to all versions. The actual errata will come with dedicated commits. The description is not actually used in the code but serves as documentation. Create the landlock_abi_version symbol and use its value to check errata consistency. Update test_base's create_ruleset_checks_ordering tests and add errata tests. This commit is backportable down to the first version of Landlock. Fixes: 3532b0b435 ("landlock: Enable user space to infer supported features") Cc: Günther Noack <gnoack@google.com> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20250318161443.279194-3-mic@digikod.net Signed-off-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-04-25 10:44:02 +02:00
..
common.h
cred.c	landlock: Don't lose track of restrictions on cred_transfer	2024-08-03 08:49:29 +02:00
cred.h
errata.h	landlock: Add the errata interface	2025-04-25 10:44:02 +02:00
fs.c	landlock: Handle weird files	2025-02-21 13:49:04 +01:00
fs.h
Kconfig
limits.h
Makefile
object.c
object.h
ptrace.c
ptrace.h
ruleset.c
ruleset.h
setup.c	landlock: Add the errata interface	2025-04-25 10:44:02 +02:00
setup.h	landlock: Add the errata interface	2025-04-25 10:44:02 +02:00
syscalls.c	landlock: Add the errata interface	2025-04-25 10:44:02 +02:00