Re: [PATCH v22 08/12] landlock: Add syscall implementations

2020-10-30 Thread Mickaël Salaün
On 30/10/2020 04:07, Jann Horn wrote: > On Thu, Oct 29, 2020 at 12:30 PM Mickaël Salaün wrote: >> On 29/10/2020 02:06, Jann Horn wrote: >>> On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: These 3 system calls are designed to be used by unprivileged processes to sandbox

Re: [PATCH v22 08/12] landlock: Add syscall implementations

2020-10-29 Thread Jann Horn
On Thu, Oct 29, 2020 at 12:30 PM Mickaël Salaün wrote: > On 29/10/2020 02:06, Jann Horn wrote: > > On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: > >> These 3 system calls are designed to be used by unprivileged processes > >> to sandbox themselves: [...] > >> + /* > >> +*

Re: [PATCH v22 08/12] landlock: Add syscall implementations

2020-10-29 Thread Mickaël Salaün
On 29/10/2020 02:06, Jann Horn wrote: > On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: >> These 3 system calls are designed to be used by unprivileged processes >> to sandbox themselves: >> * landlock_create_ruleset(2): Creates a ruleset and returns its file >> descriptor. >> *

Re: [PATCH v22 08/12] landlock: Add syscall implementations

2020-10-28 Thread Jann Horn
On Tue, Oct 27, 2020 at 9:04 PM Mickaël Salaün wrote: > These 3 system calls are designed to be used by unprivileged processes > to sandbox themselves: > * landlock_create_ruleset(2): Creates a ruleset and returns its file > descriptor. > * landlock_add_rule(2): Adds a rule (e.g. file hierarchy

[PATCH v22 08/12] landlock: Add syscall implementations

2020-10-27 Thread Mickaël Salaün
From: Mickaël Salaün These 3 system calls are designed to be used by unprivileged processes to sandbox themselves: * landlock_create_ruleset(2): Creates a ruleset and returns its file descriptor. * landlock_add_rule(2): Adds a rule (e.g. file hierarchy access) to a ruleset, identified by the