Skip to content

Commit 03a0ff9

Browse files
committed
landlock: Improve erratum documentation
Improve description about scoped signal handling. Reported-by: Günther Noack <gnoack3000@gmail.com> Link: https://lore.kernel.org/r/20251219193855.825889-2-mic@digikod.net Reviewed-by: Günther Noack <gnoack3000@gmail.com> Signed-off-by: Mickaël Salaün <mic@digikod.net>
1 parent 60207df commit 03a0ff9

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

security/landlock/errata/abi-6.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
* This fix addresses an issue where signal scoping was overly restrictive,
1010
* preventing sandboxed threads from signaling other threads within the same
1111
* process if they belonged to different domains. Because threads are not
12-
* security boundaries, user space might assume that any thread within the same
12+
* security boundaries, user space might assume that all threads within the same
1313
* process can send signals between themselves (see :manpage:`nptl(7)` and
1414
* :manpage:`libpsx(3)`). Consistent with :manpage:`ptrace(2)` behavior, direct
1515
* interaction between threads of the same process should always be allowed.

0 commit comments

Comments
 (0)