mirror of
https://github.com/linux-msm/laptops-kernel.git
synced 2026-08-13 14:19:53 -07:00
Samasth Norway AnandaandMickaël Salaün
fe72ce6710
Add errata section with code examples for querying errata and a warning that most applications should not check errata. Use kernel-doc directives to include errata descriptions from the header files instead of manual links. Also enhance existing DOC sections in security/landlock/errata/abi-*.h files with Impact sections, and update the code comment in syscalls.c to remind developers to update errata documentation when applicable. This addresses the gap where the kernel implements errata tracking but provides no user-facing documentation on how to use it, while improving the existing technical documentation in-place rather than duplicating it. Signed-off-by: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> Reviewed-by: Günther Noack <gnoack3000@gmail.com> Link: https://lore.kernel.org/r/20260128031814.2945394-3-samasth.norway.ananda@oracle.com [mic: Cosmetic fix] Signed-off-by: Mickaël Salaün <mic@digikod.net>
25 lines
948 B
C
25 lines
948 B
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
|
|
/**
|
|
* DOC: erratum_3
|
|
*
|
|
* Erratum 3: Disconnected directory handling
|
|
* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
*
|
|
* This fix addresses an issue with disconnected directories that occur when a
|
|
* directory is moved outside the scope of a bind mount. The change ensures
|
|
* that evaluated access rights include both those from the disconnected file
|
|
* hierarchy down to its filesystem root and those from the related mount point
|
|
* hierarchy. This prevents access right widening through rename or link
|
|
* actions.
|
|
*
|
|
* Impact:
|
|
*
|
|
* Without this fix, it was possible to widen access rights through rename or
|
|
* link actions involving disconnected directories, potentially bypassing
|
|
* ``LANDLOCK_ACCESS_FS_REFER`` restrictions. This could allow privilege
|
|
* escalation in complex mount scenarios where directories become disconnected
|
|
* from their original mount points.
|
|
*/
|
|
LANDLOCK_ERRATUM(3)
|