On Mon, Feb 21, 2022 at 4:15 PM Mickaël Salaün <mic@xxxxxxxxxxx> wrote: > > From: Mickaël Salaün <mic@xxxxxxxxxxxxxxxxxxx> > > Add LANDLOCK_ACCESS_FS_REFER to the "roughly write" access rights and > leverage the Landlock ABI version to only try to enforce it if it is > supported by the running kernel. > > Signed-off-by: Mickaël Salaün <mic@xxxxxxxxxxxxxxxxxxx> > Link: https://lore.kernel.org/r/20220221212522.320243-9-mic@xxxxxxxxxxx > --- > samples/landlock/sandboxer.c | 37 +++++++++++++++++++++++++----------- > 1 file changed, 26 insertions(+), 11 deletions(-) Reviewed-by: Paul Moore <paul@xxxxxxxxxxxxxx> -- paul-moore.com
