Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

landlock: use "landlock.fs." prefix in filesystem commands #6228

Merged
merged 2 commits into from
Feb 29, 2024
Merged

landlock: use "landlock.fs." prefix in filesystem commands #6228

merged 2 commits into from
Feb 29, 2024

Commits on Feb 28, 2024

  1. landlock: add _fs prefix to filesystem functions 

    Relates to netblue30#6078.
    @kmk3
    kmk3 committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    1758765 View commit details
    Browse the repository at this point in the history

  2. landlock: use "landlock.fs." prefix in filesystem commands 

    Since Landlock ABI v4 it is possible to restrict actions related to the
network and potentially more areas will be added in the future.

So use `landlock.fs.` as the prefix in the current filesystem-related
commands (and later `landlock.net.` for the network-related commands) to
keep them organized and to match what is used in the kernel.

Examples of filesystem and network access flags:

* `LANDLOCK_ACCESS_FS_EXECUTE`: Execute a file.
* `LANDLOCK_ACCESS_FS_READ_DIR`: Open a directory or list its content.
* `LANDLOCK_ACCESS_NET_BIND_TCP`: Bind a TCP socket to a local port.
* `LANDLOCK_ACCESS_NET_CONNECT_TCP`: Connect an active TCP socket to a
  remote port.

Relates to netblue30#6078.
    @kmk3
    kmk3 committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    9cfeb48 View commit details
    Browse the repository at this point in the history