Re: [PATCH v12 02/12] landlock: Allow filesystem layout changes for domains without such rule type
From: Mickaël Salaün <mic@digikod.net>
Date: 2023-10-02 20:26:52
Also in:
netdev, netfilter-devel
From: Mickaël Salaün <mic@digikod.net>
Date: 2023-10-02 20:26:52
Also in:
netdev, netfilter-devel
Please change the subject to "landlock: Allow FS topology changes for domains without such rule type" to be consistent with the documentation. On Wed, Sep 20, 2023 at 05:26:30PM +0800, Konstantin Meskhidze wrote:
From: Mickaël Salaün <mic@digikod.net> Allow mount point and root directory changes when there is no filesystem rule tied to the current Landlock domain. This doesn't change anything for now because a domain must have at least a (filesystem) rule, but this will change when other rule types will come. For instance, a domain only restricting the network should have no impact on filesystem restrictions. Add a new get_current_fs_domain() helper to quickly check filesystem rule existence for all filesystem LSM hooks. Remove unnecessary inlining. Signed-off-by: Mickaël Salaün <mic@digikod.net>