Mickaël Salaün c1d9c0d0c7 landlock: Change landlock_restrict_self(2) check ordering ...

commit eba39ca4b1 upstream.

According to the Landlock goal to be a security feature available to
unprivileges processes, it makes more sense to first check for
no_new_privs before checking anything else (i.e. syscall arguments).

Merge inval_fd_enforce and unpriv_enforce_without_no_new_privs tests
into the new restrict_self_checks_ordering.  This is similar to the
previous commit checking other syscalls.

Link: https://lore.kernel.org/r/20220506160820.524344-10-mic@digikod.net
Cc: stable@vger.kernel.org
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-06-09 10:23:24 +02:00

..

fault-injection

…

ktest

…

kunit

kunit: tool: Import missing importlib.abc

2022-02-23 12:03:04 +01:00

nvdimm

…

radix-tree

…

scatterlist

…

selftests

landlock: Change landlock_restrict_self(2) check ordering

2022-06-09 10:23:24 +02:00

vsock

…