| /* SPDX-License-Identifier: GPL-2.0-only */ |
| |
| /** |
| * DOC: erratum_1 |
| * |
| * Erratum 1: TCP socket identification |
| * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| * |
| * This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC, |
| * MPTCP, or SCTP) were incorrectly restricted by TCP access rights during |
| * :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures |
| * that only TCP sockets are subject to TCP access rights, allowing other |
| * protocols to operate without unnecessary restrictions. |
| * |
| * Impact: |
| * |
| * In kernels without this fix, using ``LANDLOCK_ACCESS_NET_BIND_TCP`` or |
| * ``LANDLOCK_ACCESS_NET_CONNECT_TCP`` would incorrectly restrict non-TCP |
| * stream protocols (SMC, MPTCP, SCTP), potentially breaking applications |
| * that rely on these protocols while using Landlock network restrictions. |
| */ |
| LANDLOCK_ERRATUM(1) |
