Merge tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/mic...
authorLinus Torvalds <torvalds@linux-foundation.org>
Fri, 2 Sep 2022 22:24:08 +0000 (15:24 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Fri, 2 Sep 2022 22:24:08 +0000 (15:24 -0700)
commit0c95f02269a1ef6c3fae4f46bbdd7a4578d44b8f
tree11f0c001fad170d08cc1b4a21e6a638b27768b7b
parentb307e704574bd4187d4f46212e7ea8189b53f9ab
parent55e55920bbe3ccf516022c51f5527e7d026b8f1d
Merge tag 'landlock-6.0-rc4' of git://git./linux/kernel/git/mic/linux

Pull landlock fix from Mickaël Salaün:
 "This fixes a mis-handling of the LANDLOCK_ACCESS_FS_REFER right when
  multiple rulesets/domains are stacked.

  The expected behaviour was that an additional ruleset can only
  restrict the set of permitted operations, but in this particular case,
  it was potentially possible to re-gain the LANDLOCK_ACCESS_FS_REFER
  right"

* tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux:
  landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER