[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 10 Oct 2023 05:17:11 +0300
From: "Konstantin Meskhidze (A)" <konstantin.meskhidze@...wei.com>
To: Mickaël Salaün <mic@...ikod.net>
CC: <willemdebruijn.kernel@...il.com>, <gnoack3000@...il.com>,
<linux-security-module@...r.kernel.org>, <netdev@...r.kernel.org>,
<netfilter-devel@...r.kernel.org>, <yusongping@...wei.com>,
<artem.kuzin@...wei.com>
Subject: Re: [PATCH v12 02/12] landlock: Allow filesystem layout changes for
domains without such rule type
10/2/2023 11:26 PM, Mickaël Salaün пишет:
> Please change the subject to "landlock: Allow FS topology changes for
> domains without such rule type" to be consistent with the documentation.
>
Got it. Thanks.
>
> On Wed, Sep 20, 2023 at 05:26:30PM +0800, Konstantin Meskhidze wrote:
>> From: Mickaël Salaün <mic@...ikod.net>
>>
>> Allow mount point and root directory changes when there is no filesystem
>> rule tied to the current Landlock domain. This doesn't change anything
>> for now because a domain must have at least a (filesystem) rule, but
>> this will change when other rule types will come. For instance, a
>> domain only restricting the network should have no impact on filesystem
>> restrictions.
>>
>> Add a new get_current_fs_domain() helper to quickly check filesystem
>> rule existence for all filesystem LSM hooks.
>>
>> Remove unnecessary inlining.
>>
>> Signed-off-by: Mickaël Salaün <mic@...ikod.net>
> .
Powered by blists - more mailing lists