root/security/landlock/errata/abi-4.h
/* SPDX-License-Identifier: GPL-2.0-only */

/**
 * DOC: erratum_1
 *
 * Erratum 1: TCP socket identification
 * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 *
 * This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC,
 * MPTCP, or SCTP) were incorrectly restricted by TCP access rights during
 * :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures
 * that only TCP sockets are subject to TCP access rights, allowing other
 * protocols to operate without unnecessary restrictions.
 *
 * Impact:
 *
 * In kernels without this fix, using ``LANDLOCK_ACCESS_NET_BIND_TCP`` or
 * ``LANDLOCK_ACCESS_NET_CONNECT_TCP`` would incorrectly restrict non-TCP
 * stream protocols (SMC, MPTCP, SCTP), potentially breaking applications
 * that rely on these protocols while using Landlock network restrictions.
 */
LANDLOCK_ERRATUM(1)