Re: [PATCH v15 09/10] samples/landlock: Add a sandbox manager example
From: Randy Dunlap <hidden>
Date: 2020-03-26 23:54:31
Also in:
linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-security-module, lkml
Hi, On 3/26/20 1:27 PM, Mickaël Salaün wrote:
quoted hunk ↗ jump to hunk
diff --git a/samples/Kconfig b/samples/Kconfig index 9d236c346de5..b54408c5bd86 100644 --- a/samples/Kconfig +++ b/samples/Kconfig@@ -120,6 +120,13 @@ config SAMPLE_HIDRAW bool "hidraw sample" depends on HEADERS_INSTALL +config SAMPLE_LANDLOCK + bool "Build Landlock sample code" + select HEADERS_INSTALL
I think that this should be like all of the other users of HEADERS_INSTALL and depend on that instead of select-ing it.
+ help + Build a simple Landlock sandbox manager able to launch a process + restricted by a user-defined filesystem access-control security policy. + config SAMPLE_PIDFD bool "pidfd sample" depends on HEADERS_INSTALL
thanks. -- ~Randy