mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2026-08-09 06:14:34 +02:00
Samasth Norway AnandaandMickaël Salaün
fe72ce6710
Add errata section with code examples for querying errata and a warning that most applications should not check errata. Use kernel-doc directives to include errata descriptions from the header files instead of manual links. Also enhance existing DOC sections in security/landlock/errata/abi-*.h files with Impact sections, and update the code comment in syscalls.c to remind developers to update errata documentation when applicable. This addresses the gap where the kernel implements errata tracking but provides no user-facing documentation on how to use it, while improving the existing technical documentation in-place rather than duplicating it. Signed-off-by: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> Reviewed-by: Günther Noack <gnoack3000@gmail.com> Link: https://lore.kernel.org/r/20260128031814.2945394-3-samasth.norway.ananda@oracle.com [mic: Cosmetic fix] Signed-off-by: Mickaël Salaün <mic@digikod.net>
23 lines
856 B
C
23 lines
856 B
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
|
|
/**
|
|
* DOC: erratum_1
|
|
*
|
|
* Erratum 1: TCP socket identification
|
|
* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
*
|
|
* This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC,
|
|
* MPTCP, or SCTP) were incorrectly restricted by TCP access rights during
|
|
* :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures
|
|
* that only TCP sockets are subject to TCP access rights, allowing other
|
|
* protocols to operate without unnecessary restrictions.
|
|
*
|
|
* Impact:
|
|
*
|
|
* In kernels without this fix, using ``LANDLOCK_ACCESS_NET_BIND_TCP`` or
|
|
* ``LANDLOCK_ACCESS_NET_CONNECT_TCP`` would incorrectly restrict non-TCP
|
|
* stream protocols (SMC, MPTCP, SCTP), potentially breaking applications
|
|
* that rely on these protocols while using Landlock network restrictions.
|
|
*/
|
|
LANDLOCK_ERRATUM(1)
|