Hello:
This series was applied to netdev/net-next.git (main)
by Jakub Kicinski [off-list ref]:
On Thu, 13 Aug 2026 12:28:14 -0400 you wrote:
Right now if some LSM denies an AF_UNIX socket peer to receive a
SCM_RIGHTS fd, the SCM_RIGHTS fd array will be cut short at
that point, and MSG_CTRUNC is set on return of recvmsg(2). This is
highly problematic behaviour, because it leaves the receiver
wondering what happened. As per man page MSG_CTRUNC is supposed to
indicate that the control buffer was sized too short, but suddenly
a permission error might result in the exact same flag being set.
Moreover, the receiver has no chance to determine how many fds got
originally sent and how many were suppressed.[1]
[...]
Here is the summary with links:
- [net-next,v7,1/4] net: af_unix: enable custom setsockopt for all socket types
https://git.kernel.org/netdev/net-next/c/de1c489b57c1
- [net-next,v7,2/4] net: scm: move scm_detach_fds() from common path to scm_recv_unix()
https://git.kernel.org/netdev/net-next/c/48b84acc5e18
- [net-next,v7,3/4] net: af_unix: useful handling of LSM denials on SCM_RIGHTS
https://git.kernel.org/netdev/net-next/c/fd8756fa1487
- [net-next,v7,4/4] selftest: Add tests for useful handling of LSM denials on SCM_RIGHTS
https://git.kernel.org/netdev/net-next/c/5d513ce19de9
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html