Re: [PATCH v7 03/28] landlock: Move domain hierarchy management

[PATCH v7 00/28] Landlock audit support · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 02/28] landlock: Add unique ID generator · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 03/28] landlock: Move domain hierarchy management · Mickaël Salaün <mic@digikod.net> · 2025-03-20
Re: [PATCH v7 03/28] landlock: Move domain hierarchy management · Günther Noack <hidden> · 2025-03-25
[PATCH v7 07/28] landlock: Prepare to use credential instead of domain for fowner · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 08/28] landlock: Identify domain execution crossing · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 05/28] landlock: Prepare to use credential instead of domain for network · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 06/28] landlock: Prepare to use credential instead of domain for scope · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 11/28] landlock: Log mount-related denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
Re: [PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials · Tingmao Wang <hidden> · 2025-03-27
Re: [PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials · Mickaël Salaün <mic@digikod.net> · 2025-03-28
[PATCH v7 10/28] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 14/28] landlock: Log truncate and IOCTL denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 12/28] landlock: Log file-related denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 16/28] landlock: Log scoped denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 13/28] landlock: Factor out IOCTL hooks · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 17/28] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 15/28] landlock: Log TCP bind and connect denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 19/28] samples/landlock: Enable users to log sandbox denials · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 21/28] selftests/landlock: Extend tests for landlock_restrict_self(2)'s flags · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 18/28] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 22/28] selftests/landlock: Add tests for audit flags and domain IDs · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 25/28] selftests/landlock: Add audit tests for abstract UNIX socket scoping · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 26/28] selftests/landlock: Add audit tests for filesystem · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 27/28] selftests/landlock: Add audit tests for network · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 23/28] selftests/landlock: Test audit with restrict flags · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 28/28] landlock: Add audit documentation · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 20/28] selftests/landlock: Add test for invalid ruleset file descriptor · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper · Mickaël Salaün <mic@digikod.net> · 2025-03-20
Re: [PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper · Günther Noack <hidden> · 2025-03-25
[PATCH v7 24/28] selftests/landlock: Add audit tests for ptrace · Mickaël Salaün <mic@digikod.net> · 2025-03-20
[PATCH v7 04/28] landlock: Prepare to use credential instead of domain for filesystem · Mickaël Salaün <mic@digikod.net> · 2025-03-20

From: Günther Noack <hidden>
Date: 2025-03-25 19:37:08
Also in: lkml

On Thu, Mar 20, 2025 at 08:06:52PM +0100, Mickaël Salaün wrote:

Create a new domain.h file containing the struct landlock_hierarchy
definition and helpers.  This type will grow with audit support.  This
also prepares for a new domain type.

Cc: Günther Noack <gnoack@google.com>
Signed-off-by: Mickaël Salaün <mic@digikod.net>

Reviewed-by: Günther Noack <redacted>

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help