On 2026/09/21 7:34, Matthieu Buffet wrote:
Hi Tomoyo maintainers,
On 6/27/2026 7:28 AM, Tetsuo Handa wrote:
quoted
I updated your patch like below in order to exclude kernel threads from this check.
If we are OK to go with modifying individual LSM, I'll apply this change.
Archiving this patch, I see you have had no answer from other maintainers to your
question about the approach taken (per-LSM instead of aiming for a hook-wide fix).
Patches have indeed been merged for other affected LSMs:
4d587cd8a721 ("apparmor: mediate the implicit connect of TCP fast open sendmsg")
44c74d27d1b9 ("selinux: check connect-related permissions on TCP Fast Open")
33cb713db016 ("landlock: Fix TCP Fast Open connection bypass")
Have a nice day!
Matthieu
Thank you for letting me know.
I am currently modifying your patch into a series that can please sashiko's review.
Since sashiko finds many corner cases, I need to make several trial and errors.
Please wait patiently.