Commits on Feb 2, 2024

1. landlock: split .special into .makeipc and .makedev …

   As discussed with @topimiettinen[1], it is unlikely that an unprivileged
   process would need to directly create block or character devices.  Also,
   `landlock.special` is not very descriptive of what it allows.
   
   So split `landlock.special` into:
   
   * `landlock.makeipc`: allow creating named pipes and sockets (which are
     usually used for inter-process communication)
   * `landlock.makedev`: allow creating block and character devices
   
   Misc: The `makedev` name is based on `nodev` from mount(8), which makes
   mount not interpret block and character devices.  `ipc` was suggested by
   @rusty-snake[2].
   
   Relates to netblue30#6078.
   
   [1] netblue30#6078 (review)
   [2] netblue30#6187 (comment)

   

   kmk3 committed Feb 2, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for f70ffbe
   • Browse repository at this point

   Copy the full SHA

   f70ffbe View commit details

   Browse the repository at this point in the history