From: "Mickaël Salaün" <mic@digikod.net>
To: Sasha Levin <sashal@kernel.org>
Cc: stable@vger.kernel.org,
"Greg Kroah-Hartman" <gregkh@linuxfoundation.org>,
"Günther Noack" <gnoack@google.com>,
"Christian Brauner" <brauner@kernel.org>,
"John Johansen" <john.johansen@canonical.com>,
"James Morris" <jmorris@namei.org>,
"Serge E. Hallyn" <serge@hallyn.com>,
"Kentaro Takeda" <takedakn@nttdata.co.jp>,
"Tetsuo Handa" <penguin-kernel@i-love.sakura.ne.jp>,
linux-kernel@vger.kernel.org,
linux-security-module@vger.kernel.org,
"Al Viro" <viro@zeniv.linux.org.uk>,
"Jann Horn" <jannh@google.com>,
"Kees Cook" <keescook@chromium.org>,
"Konstantin Meskhidze" <konstantin.meskhidze@huawei.com>,
"Paul Moore" <paul@paul-moore.com>,
"Shuah Khan" <shuah@kernel.org>,
linux-doc@vger.kernel.org, linux-fsdevel@vger.kernel.org
Subject: Re: [PATCH 5.15.y 2/2] selftests/landlock: Add tests for whiteout object creation
Date: Fri, 18 Sep 2026 15:55:51 +0200 [thread overview]
Message-ID: <20260918.ineeFoh3ooHi@digikod.net> (raw)
In-Reply-To: <2026-09-17-daily-reply-0015-landlock-whiteout-tests-hold@kernel.org>
On Thu, Sep 17, 2026 at 08:52:42PM -0400, Sasha Levin wrote:
> > [ Upstream commit ee890889b30b22f9a21636061def7a04e4f89380 ]
> >
> > Add tests to check that whiteout object creation is guarded by
> > LANDLOCK_ACCESS_FS_MAKE_REG, in the cases where these are created from
> > userspace:
>
> I am holding these until the newer trees are covered. 7.2 and 6.18 already
> carry 672fa082d48b ("landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout
> creation") but not ee890889b30b ("selftests/landlock: Add tests for whiteout
> object creation"), and taking a fix on 6.12 and older while 6.18 lacks it is
> the wrong order.
>
> 7.2 can take the upstream commit as is, but 6.18 cannot: it has no enforce_fs()
> and dc75f8904694 ("selftests/landlock: Simplify ruleset creation and
> enforcement in fs_test") does not apply there.
>
> Could you send a 6.18.y version? The 6.12, 6.6, 6.1 and 5.15 patches themselves
> look good and I will take them once 6.18 is in hand.
I sent the 6.18.y version here:
https://lore.kernel.org/stable/22492930911630bb9724ed1c34248143f8913f68.1789655724.git.mic@digikod.net/
and the 7.2.y version here:
https://lore.kernel.org/stable/732f5f5e0f5bb22d5717577d9c382b00c87725c4.1789655724.git.mic@digikod.net/
next prev parent reply other threads:[~2026-09-18 13:56 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <2026090319-sprinkler-mandolin-e566@gregkh>
2026-09-17 14:55 ` [PATCH 5.15.y 1/2] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Mickaël Salaün
2026-09-18 0:52 ` Sasha Levin
2026-09-17 14:55 ` [PATCH 5.15.y 2/2] selftests/landlock: Add tests for whiteout object creation Mickaël Salaün
2026-09-18 0:52 ` Sasha Levin
2026-09-18 13:55 ` Mickaël Salaün [this message]
2026-09-18 19:45 ` Sasha Levin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260918.ineeFoh3ooHi@digikod.net \
--to=mic@digikod.net \
--cc=brauner@kernel.org \
--cc=gnoack@google.com \
--cc=gregkh@linuxfoundation.org \
--cc=jannh@google.com \
--cc=jmorris@namei.org \
--cc=john.johansen@canonical.com \
--cc=keescook@chromium.org \
--cc=konstantin.meskhidze@huawei.com \
--cc=linux-doc@vger.kernel.org \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=paul@paul-moore.com \
--cc=penguin-kernel@i-love.sakura.ne.jp \
--cc=sashal@kernel.org \
--cc=serge@hallyn.com \
--cc=shuah@kernel.org \
--cc=stable@vger.kernel.org \
--cc=takedakn@nttdata.co.jp \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®