Re: [PATCH net-next v7 0/4] net: af_unix: useful handling of LSM denials on SCM_RIGHTS
| Newsgroups | gmane.linux.file-systems,gmane.linux.network,gmane.linux.kernel |
|---|---|
| Message-ID | <178701662063.1820167.14677074297106840300.git-patchwork-notify@kernel.org> |
Hello: This series was applied to netdev/net-next.git (main) by Jakub Kicinski <[email protected]>: On Thu, 13 Aug 2026 12:28:14 -0400 you wrote: > Right now if some LSM denies an AF_UNIX socket peer to receive a > SCM_RIGHTS fd, the SCM_RIGHTS fd array will be cut short at > that point, and MSG_CTRUNC is set on return of recvmsg(2). This is > highly problematic behaviour, because it leaves the receiver > wondering what happened. As per man page MSG_CTRUNC is supposed to > indicate that the control buffer was sized too short, but suddenly > a permission error might result in the exact same flag being set. > Moreover, the receiver has no chance to determine how many fds got > originally sent and how many were suppressed.[1] > > [...] Here is the summary with links: - [net-next,v7,1/4] net: af_unix: enable custom setsockopt for all socket types https://git.kernel.org/netdev/net-next/c/de1c489b57c1 - [net-next,v7,2/4] net: scm: move scm_detach_fds() from common path to scm_recv_unix() https://git.kernel.org/netdev/net-next/c/48b84acc5e18 - [net-next,v7,3/4] net: af_unix: useful handling of LSM denials on SCM_RIGHTS https://git.kernel.org/netdev/net-next/c/fd8756fa1487 - [net-next,v7,4/4] selftest: Add tests for useful handling of LSM denials on SCM_RIGHTS https://git.kernel.org/netdev/net-next/c/5d513ce19de9 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html