Re: [PATCH v3 1/2] landlock.7, landlock_*.2: Document Landlock ABI version 4
From: "Günther Noack" <gnoack@google.com>
Date: 2024-08-21 16:37:36
On Wed, Aug 21, 2024 at 06:30:09PM +0300, Konstantin Meskhidze (A) wrote:
7/23/2024 1:19 PM, Günther Noack wrote:quoted
[...] Users should use the Landlock ABI version rather than the kernel version@@ -439,9 +455,10 @@ and only use the available subset of access rights: * numbers hardcoded to keep the example short. */ __u64 landlock_fs_access_rights[] = { - (LANDLOCK_ACCESS_FS_MAKE_SYM << 1) \- 1, /* v1 */ - (LANDLOCK_ACCESS_FS_REFER << 1) \- 1, /* v2: add "refer" */ - (LANDLOCK_ACCESS_FS_TRUNCATE << 1) \- 1, /* v3: add "truncate" */ + (LANDLOCK_ACCESS_FS_MAKE_SYM << 1) \- 1, /* v1 */ + (LANDLOCK_ACCESS_FS_REFER << 1) \- 1, /* v2: add "refer" */ + (LANDLOCK_ACCESS_FS_TRUNCATE << 1) \- 1, /* v3: add "truncate" */ + (LANDLOCK_ACCESS_FS_TRUNCATE << 1) \- 1, /* v4: TCP support */ }; \& int abi = landlock_create_ruleset(NULL, 0,Co-developed-by: Konstantin Meskhidze <redacted> Signed-off-by: Konstantin Meskhidze <redacted>
Thank you very much, Konstantin! :) —Günther