Thread (2 messages) 2 messages, 2 authors, 2025-03-05

Re: [PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules

From: Alejandro Colomar <alx@kernel.org>
Date: 2025-03-05 18:36:05
Also in: linux-security-module

Hi!

On Mon, Mar 03, 2025 at 08:50:29PM +0100, Günther Noack wrote:
+.P
+The two existing types of rules are:
BTW, I didn't want to send back the patch for another revision, so I
applied it as is, but this sentence is likely to get outdated at some
point.

I would have removed the "two" from it.  But we'll be able to remove it
when/if it changes.  I'm just mentioning this for future documentation.


Cheers,
Alex
+.TP
+.B Filesystem rules
+For these rules, the object is a file hierarchy,
+and the related filesystem actions are defined with
+.IR "filesystem access rights" .
+.TP
+.BR "Network rules" " (since ABI v4)"
+For these rules, the object is a TCP port,
+and the related actions are defined with
+.IR "network access rights" .
 .\"
 .SS Filesystem actions
 These flags enable to restrict a sandboxed process to a
-- 
2.48.1.711.g2feabab25a-goog
-- 
<https://www.alejandro-colomar.es/>
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help