Changes in trace.h

67f8bc848ee31831336bd478e57d2f993551902e - Merge drm/drm-fixes into drm-misc-fixes

Tue, 01 Sep 2026 09:38:51 +0200

Merge drm/drm-fixes into drm-misc-fixesLet's start the 7.3 drm-misc-fixes cycle.Signed-off-by: Maxime Ripard List of files: /linux/tools/testing/selftests/landlock/trace.h

7199989f3f3194d653b024ce8e79cea6b15e38b9 - Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

Fri, 21 Aug 2026 21:28:35 +0200

Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxPull Landlock update from Mickaël Salaün: "This improves observability with Landlock tracepoints support, which required some refactoring for dedicated domain types and common helpers shared with audit code. A LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS flag is also added to improve process-wide domain enforcement consistency. Whiteout files are now correctly handled and tested, and a few other fixes"* tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux: (34 commits) landlock: Document tracepoints selftests/landlock: Add landlock_enforce_domain trace tests selftests/landlock: Add scope and ptrace tracepoint tests selftests/landlock: Add network tracepoint tests selftests/landlock: Add filesystem tracepoint tests selftests/landlock: Add trace event test infrastructure and tests landlock: Add tracepoints for ptrace and scope denials landlock: Add landlock_deny_access_fs and landlock_deny_access_net landlock: Add tracepoints for rule checking landlock: Add landlock_enforce_domain tracepoint landlock: Add create_domain and free_domain tracepoints landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints landlock: Add create_ruleset and free_ruleset tracepoints landlock: Consolidate access-right and scope names in a shared header landlock: Decouple the per-denial logging decision from CONFIG_AUDIT landlock: Split denial logging from audit into common framework landlock: Split struct landlock_domain from struct landlock_ruleset landlock: Move domain query functions to domain.c landlock: Prepare ruleset and domain type split samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler ... List of files: /linux/tools/testing/selftests/landlock/trace.h

ac6d193de58b3b5eacf2fb8ffa48eff076cacc32 - selftests/landlock: Add landlock_enforce_domain trace tests

Tue, 11 Aug 2026 11:43:32 +0200

selftests/landlock: Add landlock_enforce_domain trace testsAdd trace tests for the landlock_enforce_domain event in trace_test.c,asserting field counts after the syscall returns rather than lineordering across per-CPU buffers. They cover single-threaded and TSYNCenforcement (complete and process_wide set), a multi-threaded non-TSYNCprocess (process_wide clear), the single-threaded non-leader edge case,the flags-only path that creates no domain, and a thread-sync abort thatemits create_domain and free_domain but no enforce_domain.landlock_enforce_domain is added to the fixture enable path and everydisable list so its zero-events assertions cannot be tripped by a strayenforcement event.Test coverage for security/landlock is 91.6% of 2571 lines according toLLVM 22.Cc: Günther Noack Cc: Tingmao Wang Link: https://patch.msgid.link/20260811094338.288094-19-mic@digikod.netSigned-off-by: Mickaël Salaün List of files: /linux/tools/testing/selftests/landlock/trace.h

aef2dd32ddedcbd85ddec02d662af6f56b5ac309 - selftests/landlock: Add scope and ptrace tracepoint tests

Tue, 11 Aug 2026 11:43:31 +0200

selftests/landlock: Add scope and ptrace tracepoint testsAdd trace tests for the landlock_deny_ptrace,landlock_deny_scope_signal, and landlock_deny_scope_abstract_unix_sockettracepoints, each placed alongside the functional tests for itssubsystem, mirroring the audit test layout.Each tracepoint is exercised by a fixture with three variants that pinboth branches of the other-party domain field: denied against anunsandboxed other party (other-party domain ID 0), denied against asandboxed other party (non-zero ID), and an allowed baseline thatrecords no event. A second fixture per type exercises an alternate LSMhook that reaches the same tracepoint with the same other-party domainID, since each denial type can be reached through more than one hook.The datagram abstract-unix variant does not assert peer_pid, which is 0for a datagram peer (no SO_PEERCRED); sun_path is the reliable peeridentifier. The ptrace fixtures install a plain domain-creating rulesetrather than a dedicated flag, since ptrace denial relies on domainancestry, not on a specific scoped flag. The fixtures unshare the mountnamespace and remount / as MS_PRIVATE before mounting tracefs so thehelper instance is visible only to the test process.Cc: Günther Noack Cc: Tingmao Wang Link: https://patch.msgid.link/20260811094338.288094-18-mic@digikod.netSigned-off-by: Mickaël Salaün List of files: /linux/tools/testing/selftests/landlock/trace.h

2651712a15a008aa3a025563d4bc27a946ef369b - selftests/landlock: Add trace event test infrastructure and tests

Tue, 11 Aug 2026 11:43:28 +0200

selftests/landlock: Add trace event test infrastructure and testsAdd tracefs test infrastructure in trace.h: helpers for mountingtracefs, enabling/disabling events, reading the trace buffer, countingregex matches, and extracting field values, plus per-event regexpatterns. The patterns are anchored with ^ and $, verify everyTP_printk field, and use no unescaped dot characters; TRACE_PREFIXmatches the ftrace line format with either the expected task name(truncated to TASK_COMM_LEN - 1) or "<...>" for an evicted comm cacheentry.Add trace_test.c with the trace fixture (setup enables all availableevents with a PID filter, teardown disables and clears) and thelifecycle, API, denial-field, and log-flag tests. Extend the existingtrue helper to open its working directory before exiting, triggering aread_dir denial inside a sandbox, so the exec-based tests can verifysame_exec and the logged decision across an exec. Move regex_escape()from audit.h to common.h for shared use by the audit and trace tests.Enable CONFIG_ENABLE_DEFAULT_TRACERS alongside CONFIG_FTRACE in theselftest config: CONFIG_FTRACE alone only enables the tracer menuwithout activating any tracer, while CONFIG_ENABLE_DEFAULT_TRACERSselects TRACING (and thus TRACEPOINTS and event tracing) withoutdepending on architecture-specific syscall tracepoints. WhenCONFIG_FTRACE is disabled it cannot be set, so TRACEPOINTS is correctlydisabled too.Cc: Günther Noack Cc: Tingmao Wang Link: https://patch.msgid.link/20260811094338.288094-15-mic@digikod.netSigned-off-by: Mickaël Salaün List of files: /linux/tools/testing/selftests/landlock/trace.h