23 lines
856 B
C
23 lines
856 B
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
|
|
/**
|
|
* DOC: erratum_1
|
|
*
|
|
* Erratum 1: TCP socket identification
|
|
* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
*
|
|
* This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC,
|
|
* MPTCP, or SCTP) were incorrectly restricted by TCP access rights during
|
|
* :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures
|
|
* that only TCP sockets are subject to TCP access rights, allowing other
|
|
* protocols to operate without unnecessary restrictions.
|
|
*
|
|
* Impact:
|
|
*
|
|
* In kernels without this fix, using ``LANDLOCK_ACCESS_NET_BIND_TCP`` or
|
|
* ``LANDLOCK_ACCESS_NET_CONNECT_TCP`` would incorrectly restrict non-TCP
|
|
* stream protocols (SMC, MPTCP, SCTP), potentially breaking applications
|
|
* that rely on these protocols while using Landlock network restrictions.
|
|
*/
|
|
LANDLOCK_ERRATUM(1)
|