/* SPDX-License-Identifier: GPL-2.0-only */ /** * DOC: erratum_1 * * Erratum 1: TCP socket identification * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * * This fix addresses an issue where IPv4 and IPv6 stream sockets (e.g., SMC, * MPTCP, or SCTP) were incorrectly restricted by TCP access rights during * :manpage:`bind(2)` and :manpage:`connect(2)` operations. This change ensures * that only TCP sockets are subject to TCP access rights, allowing other * protocols to operate without unnecessary restrictions. * * Impact: * * In kernels without this fix, using ``LANDLOCK_ACCESS_NET_BIND_TCP`` or * ``LANDLOCK_ACCESS_NET_CONNECT_TCP`` would incorrectly restrict non-TCP * stream protocols (SMC, MPTCP, SCTP), potentially breaking applications * that rely on these protocols while using Landlock network restrictions. */ LANDLOCK_ERRATUM(1)