linux-next.git/security, branch master

Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git

2026-07-03T15:36:50+00:00

Merge branch 'master' of git://git.code.sf.net/p/tomoyo/tomoyo.git

2026-07-03T15:21:11+00:00

Merge branch 'next' of https://github.com/cschaufler/smack-next

2026-07-03T15:21:09+00:00

Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git

2026-07-03T15:21:06+00:00

Merge branch 'apparmor-next' of https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2026-07-03T15:21:04+00:00

Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm.git

2026-07-03T15:21:03+00:00

lsm: clarify security_task_prctl() hook documentation

2026-07-02T18:59:24+00:00

The task_prctl hook comment incorrectly described the hook as checking whether a prctl operation is allowed. In reality, the hook exists for LSMs to handle LSM-specific prctl operations. Update the function description and kernel-doc comment to reflect the actual behavior. The old wording appears to have been copied from other permission-check hooks despite differing semantics. Signed-off-by: Bill Roberts Acked-by: Casey Schaufler Reviewed-by: Serge Hallyn [PM: subj tweak, comment tweak -> "prctl to prctl()" ] Signed-off-by: Paul Moore

Automated merge of 'dev' into 'next'

2026-07-02T16:36:41+00:00

* dev: selinux: tighten type validation during policy load selinux: drop unnecessary goto and label from avc_alloc_node() selinux: convert int flags to bool flags in ss/services.c selinux: clean up selinuxfs resources on init failure selinux: hooks: use kmalloc() to allocate path buffer

selinux: tighten type validation during policy load

2026-07-02T16:36:15+00:00

Tighten type validation during policy load to improve robustness in the face of ill-formed policies. Signed-off-by: Stephen Smalley Signed-off-by: Paul Moore

landlock: Fix TCP Fast Open connection bypass

2026-07-02T14:55:13+00:00

The documentation of the socket_connect() LSM hook states that it controls connecting a socket to a remote address. It has not been the case since the addition of TCP Fast Open (RFC 7413) support, which allows opening a TCP connection (thus, setting a socket's destination address) via the MSG_FASTOPEN flag passed to sendto()/sendmsg()/sendmmsg(). The problem then got duplicated into MPTCP. Landlock did not take it into account when its TCP support was added, leaving a bypass of TCP connect policy. Ideally a call to the LSM hook would be added in the fastopen code path, in order to fix this generically. But connect() hooks are designed to run with the socket locked, unlike sendmsg() hooks. Closes: https://github.com/landlock-lsm/linux/issues/41 Fixes: fff69fb03dde ("landlock: Support network rules with TCP bind and connect") Signed-off-by: Matthieu Buffet Link: https://patch.msgid.link/20260701214628.33319-1-matthieu@buffet.re [mic: Wrap commit message] Signed-off-by: Mickaël Salaün