Kernel version check fails for Debian kernel

[detlefla]

In landlock/plumbing.py:149 the kernel version is checked:

kernel_version_tuple = tuple(map(int, kernel_version.split("-")[0].split(".")))

where kernel_version is the result of platform.release(). For a standard Debian kernel the reported release may look like '6.17.8+deb14-amd64'. Although the last part amd64 gets split off, the +deb14 part makes the int() call fail.

I'd suggest re.split(r"[+-]", kernel_version) but am unsure if this covers all popular version strings that could be found in the wild.

Problem occurred with landlock version 1.0.0.dev5, Python 3.12.5.

[Edward-Knight]

Thanks for reporting, that is definitely a bug. I should wrap that code in a try/except anyway as you've pointed out we don't know what weird kernel versions people might have set. I'll probably try and take all the characters matching [0-9.] from the left-hand side of the string, that should avoid the issue with messy suffixes