> Filesystem topology denials are rendered with an empty blockers value > because their blocker is identified by the request type instead of an > access mask. > > Introduce the private struct landlock_blockers to carry the request type > and final missing access mask to filesystem and network denial > tracepoints. Copy both members into named trace-record fields, then use > the type to print change_topology for topology denials while preserving > symbolic access masks for ordinary denials. > > The request type lets typed BPF consumers distinguish topology denials > from access denials. Keeping the native access mask in a pointer-reached > field also lets CO-RE adjust existing programs' load width if > access_mask_t grows. > > Cc: Günther Noack <[email protected]> > Cc: Steven Rostedt <[email protected]> > Fixes: 01ce260f5ccf ("landlock: Add landlock_deny_access_fs and > landlock_deny_access_net") > Signed-off-by: Mickaël Salaün <[email protected]>
Sashiko has reviewed this patch and found no issues. It looks great! -- Sashiko AI review · https://sashiko.dev/#/patchset/[email protected]?part=2
