abi-4.h 856 B

12345678910111213141516171819202122
  1. /* SPDX-License-Identifier: GPL-2.0-only */
  2. /**
  3. * DOC: erratum_1
  4. *
  5. * Erratum 1: TCP socket identification
  6. * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  7. *
  8. * This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC,
  9. * MPTCP, or SCTP) were incorrectly restricted by TCP access rights during
  10. * :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures
  11. * that only TCP sockets are subject to TCP access rights, allowing other
  12. * protocols to operate without unnecessary restrictions.
  13. *
  14. * Impact:
  15. *
  16. * In kernels without this fix, using ``LANDLOCK_ACCESS_NET_BIND_TCP`` or
  17. * ``LANDLOCK_ACCESS_NET_CONNECT_TCP`` would incorrectly restrict non-TCP
  18. * stream protocols (SMC, MPTCP, SCTP), potentially breaking applications
  19. * that rely on these protocols while using Landlock network restrictions.
  20. */
  21. LANDLOCK_ERRATUM(1)