Re: [PATCH v22 01/12] landlock: Add object management

2020-11-16 Thread Mickaël Salaün
On 16/11/2020 22:26, Pavel Machek wrote: > Hi! > >> A Landlock object enables to identify a kernel object (e.g. an inode). >> A Landlock rule is a set of access rights allowed on an object. Rules >> are grouped in rulesets that may be tied to a set of processes (i.e. >> subjects) to enforce a

Re: [PATCH v22 01/12] landlock: Add object management

2020-11-16 Thread Pavel Machek
Hi! > A Landlock object enables to identify a kernel object (e.g. an inode). > A Landlock rule is a set of access rights allowed on an object. Rules > are grouped in rulesets that may be tied to a set of processes (i.e. > subjects) to enforce a scoped access-control (i.e. a domain). > > Because

Re: [PATCH v22 01/12] landlock: Add object management

2020-10-29 Thread Jann Horn
On Thu, Oct 29, 2020 at 10:30 AM Mickaël Salaün wrote: > On 29/10/2020 02:05, Jann Horn wrote: > > On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: > >> A Landlock object enables to identify a kernel object (e.g. an inode). > >> A Landlock rule is a set of access rights allowed on an

Re: [PATCH v22 01/12] landlock: Add object management

2020-10-29 Thread Mickaël Salaün
On 29/10/2020 02:05, Jann Horn wrote: > On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: >> A Landlock object enables to identify a kernel object (e.g. an inode). >> A Landlock rule is a set of access rights allowed on an object. Rules >> are grouped in rulesets that may be tied to a set

Re: [PATCH v22 01/12] landlock: Add object management

2020-10-28 Thread Jann Horn
On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: > A Landlock object enables to identify a kernel object (e.g. an inode). > A Landlock rule is a set of access rights allowed on an object. Rules > are grouped in rulesets that may be tied to a set of processes (i.e. > subjects) to enforce a

[PATCH v22 01/12] landlock: Add object management

2020-10-27 Thread Mickaël Salaün
From: Mickaël Salaün A Landlock object enables to identify a kernel object (e.g. an inode). A Landlock rule is a set of access rights allowed on an object. Rules are grouped in rulesets that may be tied to a set of processes (i.e. subjects) to enforce a scoped access-control (i.e. a domain).