Changes in Makefile

7199989f3f3194d653b024ce8e79cea6b15e38b9 - Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

Fri, 21 Aug 2026 21:28:35 +0200

Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxPull Landlock update from Mickaël Salaün: "This improves observability with Landlock tracepoints support, which required some refactoring for dedicated domain types and common helpers shared with audit code. A LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS flag is also added to improve process-wide domain enforcement consistency. Whiteout files are now correctly handled and tested, and a few other fixes"* tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux: (34 commits) landlock: Document tracepoints selftests/landlock: Add landlock_enforce_domain trace tests selftests/landlock: Add scope and ptrace tracepoint tests selftests/landlock: Add network tracepoint tests selftests/landlock: Add filesystem tracepoint tests selftests/landlock: Add trace event test infrastructure and tests landlock: Add tracepoints for ptrace and scope denials landlock: Add landlock_deny_access_fs and landlock_deny_access_net landlock: Add tracepoints for rule checking landlock: Add landlock_enforce_domain tracepoint landlock: Add create_domain and free_domain tracepoints landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints landlock: Add create_ruleset and free_ruleset tracepoints landlock: Consolidate access-right and scope names in a shared header landlock: Decouple the per-denial logging decision from CONFIG_AUDIT landlock: Split denial logging from audit into common framework landlock: Split struct landlock_domain from struct landlock_ruleset landlock: Move domain query functions to domain.c landlock: Prepare ruleset and domain type split samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler ... List of files: /linux/security/landlock/Makefile

b4540a72be4138a97c7cb74f803e57a7350a55ec - landlock: Add create_ruleset and free_ruleset tracepoints

Tue, 11 Aug 2026 11:43:21 +0200

landlock: Add create_ruleset and free_ruleset tracepointsAdd the first Landlock tracepoints, for ruleset lifecycle:landlock_create_ruleset fires from the landlock_create_ruleset() syscallhandler, and landlock_free_ruleset fires in free_ruleset() before theruleset is freed.These tracepoints, and the ones added by the following commits, share acommon design. Rather than one polymorphic event distinguished by astatus field (as audit uses a shared record type with a "status="field), each lifecycle transition and denial type gets its own eventwith a type-safe TP_PROTO, giving precise ftrace filtering by event nameand type-safe eBPF access. TP_PROTO passes the object pointer and thefields are read from it in TP_fast_assign, so an eBPF program reads thefull object state (rules, access masks, hierarchy) via BTF from a singlepointer rather than from the flattened TP_STRUCT__entry fields. Thewhole cost is paid only when a tracer is attached; the static branch isnot taken otherwise. Trace fields carry the bare access-right and scopenames (read_file), reusing the audit name tables; audit prepends thecategory (fs.read_file), which the trace event name already conveys.The trace header's DOC comment documents the consistency and lockingguarantees these events share.create_ruleset needs no lock because the ruleset is not yet shared (itsfile descriptor is not yet installed). The deallocation events use the"free_" prefix, not "drop_", because they fire when the object isactually freed.Add trace.c, built for CONFIG_TRACEPOINTS, which definesCREATE_TRACE_POINTS, and extend CONFIG_SECURITY_LANDLOCK_LOG to also beselected by CONFIG_TRACEPOINTS so the common log framework is availableto a tracepoints-only build.Add an id field to struct landlock_ruleset, gated on CONFIG_TRACEPOINTSand assigned from landlock_get_id_range() at creation. Only thetracepoints consume it (audit identifies domains, not rulesets), so itdoes not exist in an audit-only build. The Landlock ID is a stable u64that names the ruleset across the trace stream and uses the same schemeas audit, so a ruleset can be correlated between trace and auditrecords.Cc: Günther Noack Cc: Justin Suess Cc: Masami Hiramatsu Cc: Mathieu Desnoyers Cc: Steven Rostedt Cc: Tingmao Wang Link: https://patch.msgid.link/20260811094338.288094-8-mic@digikod.netSigned-off-by: Mickaël Salaün List of files: /linux/security/landlock/Makefile

e761a88cedeb46de17b6d9e8c7c41c7671e83a6b - landlock: Split denial logging from audit into common framework

Tue, 11 Aug 2026 11:43:18 +0200

landlock: Split denial logging from audit into common frameworkTracepoint emission requires the denial framework (layer identification,request validation) without depending on CONFIG_AUDIT. Separate thedenial logging infrastructure from the audit-specific code byintroducing a common log framework.Create CONFIG_SECURITY_LANDLOCK_LOG, enabled by default whenCONFIG_AUDIT is set; a following commit extends it to CONFIG_TRACEPOINTSwhen the first tracepoint consumer is added. Move the common framework(the request types, the layer identification and request validation, andthe landlock_log_denial() and landlock_log_free_domain() entry points)into log.c and log.h, and keep the audit-specific record formatting inaudit.c. log.o is built for CONFIG_SECURITY_LANDLOCK_LOG and audit.o forCONFIG_AUDIT, so the common framework is available to a tracepoints-onlybuild. The entry points dispatch to no-op static inline audit stubswithout CONFIG_AUDIT, so the call sites stay unconditional. Rename theformer landlock_log_drop_domain() to landlock_log_free_domain() to matchthe landlock_free_domain tracepoint added in a following commit.landlock_log_denial() counts denials even without audit, so itsdeclaration and no-op stub are guarded by CONFIG_SECURITY_LANDLOCK_LOG,not CONFIG_AUDIT; a CONFIG_AUDIT guard would expose the stub and clashwith log.c's definition in a tracepoints-only build.Widen the ID allocation (id.o and the landlock_init_id() /landlock_get_id_range() declarations) and the log-state representation(the domain_exec and log_subdomains_off credential fields, thelandlock_hierarchy log fields, and the code that maintains them) fromCONFIG_AUDIT to CONFIG_SECURITY_LANDLOCK_LOG, so each field and itswriter share one guard and are available to tracing without auditsupport.Widen the denial-path state that feeds the per-denial logging decisionthe same way, so the "logged" verdict is computed identically whether ornot CONFIG_AUDIT is set. Widening fown_layer is what keeps thefile-owner-signal path valid without audit: otherwisehook_file_send_sigiotask() would leave layer_plus_one at zero, trippingthe is_valid_request() canary and dropping the LANDLOCK_SCOPE_SIGNALdenial from tracing.The ruleset-level quiet_masks stays on no CONFIG guard: it is builderstate validated and stored from user input, kept available soLANDLOCK_ADD_RULE_QUIET flags are accepted and ignored, not rejected,when CONFIG_SECURITY_LANDLOCK_LOG is disabled.Cc: Günther Noack Link: https://patch.msgid.link/20260811094338.288094-5-mic@digikod.netSigned-off-by: Mickaël Salaün List of files: /linux/security/landlock/Makefile

e76ef456bb673c7fc5def433502a338631df0ebf - landlock: Prepare ruleset and domain type split

Tue, 11 Aug 2026 11:43:15 +0200

landlock: Prepare ruleset and domain type splitRulesets and domains serve fundamentally different purposes: a rulesetis mutable and user-facing, created by landlock_create_ruleset(), whilea domain is immutable after construction and enforced on tasks vialandlock_restrict_self(). Today both are represented by structlandlock_ruleset, which conflates mutable and immutable state in asingle type: the lock field is unused by domains, the hierarchy field isunused by rulesets, and lifecycle functions must handle both cases.Prepare for a clean type split by introducing two new structures:- struct landlock_rules: the red-black tree roots and rule count, shared by both rulesets and domains. Decoupling rule storage from the domain API lets the backing data structure change independently (e.g. to a hash table, cf. [1]).- struct landlock_domain: the immutable domain enforced on tasks, with no lock field because its rules and access masks are fixed once construction completes. The name reflects the role, not the internal data structure.Add the domain lifecycle helpers (landlock_get_domain(),landlock_put_domain(), landlock_put_domain_deferred()) and move domain.ofrom landlock-$(CONFIG_AUDIT) to landlock-y, because these are neededunconditionally, not just for audit logging.No behavioral change. The new types and lifecycle functions are not yetused by any caller.Cc: Günther Noack Link: https://patch.msgid.link/20250523165741.693976-1-mic@digikod.net [1]Link: https://patch.msgid.link/20260811094338.288094-2-mic@digikod.netReviewed-by: Tingmao Wang [mic: Update copyright]Signed-off-by: Mickaël Salaün List of files: /linux/security/landlock/Makefile

5c8cbca290acdd49a694b36c0af76ba0c00bbf12 - Merge branch '20260507-ubwc-rework-v4-4-c19593d20c1d@oss.qualcomm.com' of https://git.kernel.org/pub/scm/linux/kernel/git/qcom/linux into HEAD

Thu, 21 May 2026 22:36:50 +0200

Merge branch '20260507-ubwc-rework-v4-4-c19593d20c1d@oss.qualcomm.com' of https://git.kernel.org/pub/scm/linux/kernel/git/qcom/linux into HEADMerge the branch with the soc/qcom changes, required for the next UBWCpatches.Signed-off-by: Dmitry Baryshkov List of files: /linux/security/landlock/Makefile

8edf8b09fc44990977b3fbcb708035b1740d0b7e - Merge drm/drm-next into drm-intel-gt-next

Tue, 12 May 2026 10:16:35 +0200

Merge drm/drm-next into drm-intel-gt-nextBackmerging to pull in commit 5401b9adebc9 ("i915: don't usea vma that didn't match the context VM") to revert it.Signed-off-by: Joonas Lahtinen List of files: /linux/security/landlock/Makefile

1655f6895a896eb632ca8a019259bc5d358a9712 - Merge tag 'timers-v7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource

Sun, 12 Apr 2026 22:33:39 +0200

Merge tag 'timers-v7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource - Added the DT bindings for the compatible string 'fsl,imx25-epit' (Frank Li) - Made the rttm_cs variable static for the rtl otto timer driver (Krzysztof Kozlowski) - Fixed error return code handling in the sun5i timer driver (Chen Ni) - Made the timer-of and the mmio code compatible with modules (Daniel Lezcano)Link: https://lore.kernel.org/151feae1-39ba-4abd-a9f9-9bff377a2cd8@oss.qualcomm.com List of files: /linux/security/landlock/Makefile

f4b369c6fe0ceaba2da2daff8c9eb415f85926dd - Merge branch 'next' into for-linus

Mon, 20 Apr 2026 03:28:57 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.1 merge window. List of files: /linux/security/landlock/Makefile

0421ccdfad0d92713a812a5aeb7d07b0ea7213c8 - Merge tag 'v7.0-rc3' into next

Thu, 12 Mar 2026 18:44:42 +0100

Merge tag 'v7.0-rc3' into nextSync up with the mainline to brig up the latest changes, specificallychanges to ALPS driver. List of files: /linux/security/landlock/Makefile

3e9e952bb3139ad1e08f3e1960239c2988ab90c9 - Merge branch 'for-7.1-printf-kunit-build' into for-linus

Mon, 20 Apr 2026 13:41:28 +0200

Merge branch 'for-7.1-printf-kunit-build' into for-linus List of files: /linux/security/landlock/Makefile

42d3b66d4cdbacfc9d120d2301b8de89cc29a914 - Merge drm/drm-next into drm-xe-next

Thu, 12 Mar 2026 15:17:56 +0100

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 7.00-rc3. Important ahead GPU SVM merging THPsupport.Signed-off-by: Matthew Brost List of files: /linux/security/landlock/Makefile

f09812b85fa6f41058bcc46e70ac406bf9b0493a - Merge drm/drm-next into drm-intel-next

Wed, 25 Feb 2026 12:23:04 +0100

Merge drm/drm-next into drm-intel-nextSync with v7.0-rc1 which contains a few treewide changes affecting i915.Signed-off-by: Jani Nikula List of files: /linux/security/landlock/Makefile

8b85987d3cf50178f67618122d9f3bb202f62f42 - Merge drm/drm-next into drm-misc-next

Mon, 23 Feb 2026 11:48:20 +0100

Merge drm/drm-next into drm-misc-nextLet's merge 7.0-rc1 to start the new drm-misc-next windowSigned-off-by: Maxime Ripard List of files: /linux/security/landlock/Makefile

c17ee635fd3a482b2ad2bf5e269755c2eae5f25e - Merge drm/drm-fixes into drm-misc-fixes

Mon, 23 Feb 2026 10:09:45 +0100

Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard List of files: /linux/security/landlock/Makefile

c22e26bd0906e9c8325462993f01adb16b8ea2c0 - Merge tag 'landlock-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

Thu, 12 Feb 2026 00:57:08 +0100

Merge tag 'landlock-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxPull landlock updates from Mickaël Salaün: - extend Landlock to enforce restrictions on a whole process, similarly to the seccomp's TSYNC flag - refactor data structures to simplify code and improve performance - add documentation to cover missing parts* tag 'landlock-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux: mailmap: Add entry for Mickaël Salaün landlock: Transpose the layer masks data structure landlock: Add access_mask_subset() helper selftests/landlock: Add filesystem access benchmark landlock: Document audit blocker field format landlock: Add errata documentation section landlock: Add backwards compatibility for restrict flags landlock: Refactor TCP socket type check landlock: Minor reword of docs for TCP access rights landlock: Document LANDLOCK_RESTRICT_SELF_TSYNC selftests/landlock: Add LANDLOCK_RESTRICT_SELF_TSYNC tests landlock: Multithreading support for landlock_restrict_self() List of files: /linux/security/landlock/Makefile

42fc7e6543f6d17d2cf9ed3e5021f103a3d11182 - landlock: Multithreading support for landlock_restrict_self()

Thu, 27 Nov 2025 12:51:34 +0100

landlock: Multithreading support for landlock_restrict_self()Introduce the LANDLOCK_RESTRICT_SELF_TSYNC flag. With this flag, agiven Landlock ruleset is applied to all threads of the callingprocess, instead of only the current one.Without this flag, multithreaded userspace programs currently resortto using the nptl(7)/libpsx hack for multithreaded policy enforcement,which is also used by libcap and for setuid(2). Using thisuserspace-based scheme, the threads of a process enforce the sameLandlock policy, but the resulting Landlock domains are stillseparate. The domains being separate causes multiple problems:* When using Landlock's "scoped" access rights, the domain identity is used to determine whether an operation is permitted. As a result, when using LANLDOCK_SCOPE_SIGNAL, signaling between sibling threads stops working. This is a problem for programming languages and frameworks which are inherently multithreaded (e.g. Go).* In audit logging, the domains of separate threads in a process will get logged with different domain IDs, even when they are based on the same ruleset FD, which might confuse users.Cc: Andrew G. Morgan Cc: John Johansen Cc: Paul Moore Suggested-by: Jann Horn Signed-off-by: Günther Noack Link: https://lore.kernel.org/r/20251127115136.3064948-2-gnoack@google.com[mic: Fix restrict_self_flags test, clean up Makefile, allign comments,reduce local variable scope, add missing includes]Closes: https://github.com/landlock-lsm/linux/issues/2Signed-off-by: Mickaël Salaün List of files: /linux/security/landlock/Makefile

bbfd5594756011167b8f8de9a00e0c946afda1e6 - Merge drm/drm-next into drm-intel-gt-next

Wed, 28 May 2025 09:20:17 +0200

Merge drm/drm-next into drm-intel-gt-nextNeed to pull in a67221b5eb8d ("drm/i915/dp: Return min bpc supported by source instead of 0")in order to fix build breakage on GCC 9.4.0 (from Ubuntu 20.04).Signed-off-by: Joonas Lahtinen List of files: /linux/security/landlock/Makefile

db5302ae571beec635c1a96e7f72926a4e65195e - Merge drm/drm-next into drm-intel-next

Fri, 16 May 2025 09:22:36 +0200

Merge drm/drm-next into drm-intel-nextBackmerge to sync with v6.15-rc, xe, and specifically async flip changesin drm-misc.Signed-off-by: Jani Nikula List of files: /linux/security/landlock/Makefile

4f9786035f9e519db41375818e1d0b5f20da2f10 - Merge branch 'next' into for-linus

Mon, 02 Jun 2025 06:41:07 +0200

Merge branch 'next' into for-linusPrepare input updates for 6.16 merge window. List of files: /linux/security/landlock/Makefile

d51b9d81f7883f526b26e3ab903e646274aebeb1 - Merge tag 'v6.15-rc6' into next

Fri, 16 May 2025 01:20:39 +0200

Merge tag 'v6.15-rc6' into nextSync up with mainline to bring in xpad controller changes. List of files: /linux/security/landlock/Makefile