On May 8, 2026 Song Liu <[email protected]> wrote: > > Replace hook_sb_mount() with granular mount hooks. Landlock denies > all mount operations for sandboxed processes regardless of flags, > so all new hooks share a common hook_mount_deny() helper. The > mount_move hook reuses hook_move_mount(). > > Code generated with the assistance of Claude, reviewed by human. > > Signed-off-by: Song Liu <[email protected]> > --- > security/landlock/fs.c | 40 ++++++++++++++++++++++++++++++++++++---- > 1 file changed, 36 insertions(+), 4 deletions(-)
Mickaël, Günther, are you okay with this patch? -- paul-moore.com
