On Wed, Aug 21, 2024 at 06:30:09PM +0300, Konstantin Meskhidze (A) wrote: > 7/23/2024 1:19 PM, Günther Noack wrote: > > [...] > > > > Users should use the Landlock ABI version rather than the kernel version > > @@ -439,9 +455,10 @@ and only use the available subset of access rights: > > * numbers hardcoded to keep the example short. > > */ > > __u64 landlock_fs_access_rights[] = { > > - (LANDLOCK_ACCESS_FS_MAKE_SYM << 1) \- 1, /* v1 */ > > - (LANDLOCK_ACCESS_FS_REFER << 1) \- 1, /* v2: add "refer" */ > > - (LANDLOCK_ACCESS_FS_TRUNCATE << 1) \- 1, /* v3: add "truncate" */ > > + (LANDLOCK_ACCESS_FS_MAKE_SYM << 1) \- 1, /* v1 */ > > + (LANDLOCK_ACCESS_FS_REFER << 1) \- 1, /* v2: add "refer" */ > > + (LANDLOCK_ACCESS_FS_TRUNCATE << 1) \- 1, /* v3: add "truncate" */ > > + (LANDLOCK_ACCESS_FS_TRUNCATE << 1) \- 1, /* v4: TCP support */ > > }; > > \& > > int abi = landlock_create_ruleset(NULL, 0, > > Co-developed-by: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx> > Signed-off-by: Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx> Thank you very much, Konstantin! :) —Günther