Regression test to exercise that layered Landlock domains do not
accidentally deny the LANDLOCK_ACCESS_FS_REFER access right. This
used to be the case when layering a non-filesystem ruleset with a
filesystem-enforcing ruleset. In that case, REFER operations that
would have been allowed for the individual rulesets would get denied
when layering the same rulesets.
Link: https://github.com/landlock-lsm/linux/issues/67
Link: https://github.com/landlock-lsm/go-landlock/issues/66
Signed-off-by: Günther Noack <redacted>
Sashiko has reviewed this patch and found no issues.
--
Sashiko AI review · https://sashiko.dev/#/patchset/20261108-b4-landlock-refer-nonfs-layer-v2-0-2b405fc1b3aa@gmail.com?part=2