Re: [PATCH v18 07/12] landlock: Support filesystem access-control

2020-05-29 Thread Mickaël Salaün
On 27/05/2020 05:07, Amir Goldstein wrote: > On Wed, May 27, 2020 at 3:36 AM Mickaël Salaün wrote: >> >> Thanks to the Landlock objects and ruleset, it is possible to identify >> inodes according to a process's domain. To enable an unprivileged >> process to express a file hierarchy, it first n

Re: [PATCH v18 07/12] landlock: Support filesystem access-control

2020-05-26 Thread Amir Goldstein
On Wed, May 27, 2020 at 3:36 AM Mickaël Salaün wrote: > > Thanks to the Landlock objects and ruleset, it is possible to identify > inodes according to a process's domain. To enable an unprivileged > process to express a file hierarchy, it first needs to open a directory > (or a file) and pass thi

[PATCH v18 07/12] landlock: Support filesystem access-control

2020-05-26 Thread Mickaël Salaün
Thanks to the Landlock objects and ruleset, it is possible to identify inodes according to a process's domain. To enable an unprivileged process to express a file hierarchy, it first needs to open a directory (or a file) and pass this file descriptor to the kernel through landlock(2). When checki