Günther Noack a46e32db1f landlock: Clarify BUILD_BUG_ON check in scoping logic ...

The BUILD_BUG_ON check in domain_is_scoped() and
unmask_scoped_access() should check that the loop that counts down
client_layer finishes.  We therefore check that the numbers
LANDLOCK_MAX_NUM_LAYERS-1 and -1 are both representable by that
integer.  If they are representable, the numbers in between are
representable too, and the loop finishes.

Signed-off-by: Günther Noack <gnoack3000@gmail.com>
Link: https://lore.kernel.org/r/20260327164838.38231-6-gnoack3000@gmail.com
Signed-off-by: Mickaël Salaün <mic@digikod.net>

2026-04-07 18:51:07 +02:00

..

apparmor

apparmor: fix race between freeing data and fs accessing it

2026-03-09 16:05:44 -07:00

bpf

lsm: replace the name field with a pointer to the lsm_id struct

2025-10-22 19:24:18 -04:00

integrity

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

ipe

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

keys

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

landlock

landlock: Clarify BUILD_BUG_ON check in scoping logic

2026-04-07 18:51:07 +02:00

loadpin

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lockdown

lockdown: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

safesetid

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

selinux

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

smack

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

tomoyo

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

yama

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

commoncap_test.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

commoncap.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

device_cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

inode.c

Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2025-12-05 14:36:21 -08:00

Kconfig

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

Kconfig.hardening

rust: add bitmap API.

2025-09-22 15:52:44 -04:00

lsm_audit.c

net: Retire DCCP socket.

2025-04-11 18:58:10 -07:00

lsm_init.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

lsm_notifier.c

lsm: split the notifier code out into lsm_notifier.c

2025-10-22 19:24:15 -04:00

lsm_syscalls.c

lsm: rework lsm_active_cnt and lsm_idlist[]

2025-10-22 19:24:19 -04:00

lsm.h

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

Makefile

lsm: split the init code out into lsm_init.c

2025-10-22 19:24:16 -04:00

min_addr.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

security.c

lsm: Add LSM hook security_unix_find

2026-04-07 18:51:05 +02:00