Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
landlock: Improve erratum documentation
Improve description about scoped signal handling.
Reported-by: Günther Noack <gnoack3000@gmail.com>
Link: https://lore.kernel.org/r/20251219193855.825889-2-mic@digikod.net
Reviewed-by: Günther Noack <gnoack3000@gmail.com>
Signed-off-by: Mickaël Salaün <mic@digikod.net>
+1
-1
+1
-1
security/landlock/errata/abi-6.h
+1
-1
security/landlock/errata/abi-6.h
···
9
9
* This fix addresses an issue where signal scoping was overly restrictive,
10
10
* preventing sandboxed threads from signaling other threads within the same
11
11
* process if they belonged to different domains. Because threads are not
12
-
* security boundaries, user space might assume that any thread within the same
12
+
* security boundaries, user space might assume that all threads within the same
13
13
* process can send signals between themselves (see :manpage:`nptl(7)` and
14
14
* :manpage:`libpsx(3)`). Consistent with :manpage:`ptrace(2)` behavior, direct
15
15
* interaction between threads of the same process should always be allowed.