Re: [PATCH v34 08/13] landlock: Add syscall implementations

[PATCH v34 00/13] Landlock LSM · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 01/13] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 03/13] landlock: Set up the security framework and manage credentials · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 05/13] LSM: Infrastructure management of the superblock · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 02/13] landlock: Add ruleset and domain management · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 04/13] landlock: Add ptrace restrictions · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 11/13] samples/landlock: Add a sandbox manager example · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 13/13] landlock: Enable user space to infer supported features · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 12/13] landlock: Add user and kernel documentation · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 06/13] fs,security: Add sb_delete hook · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 07/13] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 08/13] landlock: Add syscall implementations · Mickaël Salaün <mic@digikod.net> · 2021-04-22
Re: [PATCH v34 08/13] landlock: Add syscall implementations · James Morris <jmorris@namei.org> · 2021-04-22
[PATCH v34 09/13] arch: Wire up Landlock syscalls · Mickaël Salaün <mic@digikod.net> · 2021-04-22
[PATCH v34 10/13] selftests/landlock: Add user space tests · Mickaël Salaün <mic@digikod.net> · 2021-04-22
Re: [PATCH v34 00/13] Landlock LSM · James Morris <jmorris@namei.org> · 2021-04-22
Re: [PATCH v34 00/13] Landlock LSM · Mickaël Salaün <mic@digikod.net> · 2021-04-23

From: James Morris <jmorris@namei.org>
Date: 2021-04-22 19:12:45
Also in: linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-security-module, lkml

On Thu, 22 Apr 2021, Mickaël Salaün wrote:

+
+	/* No flag for now. */
+	if (flags)
+		return -EINVAL;

Good, returning an error here instead of ignoring it is the right 
approach, so apps don't start using this and then break later.


-- 
James Morris
[off-list ref]

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help