Re: [PATCH v31 01/12] landlock: Add object management

On 24/03/2021 20:15, Mickaël Salaün wrote: [...] > diff --git a/security/landlock/object.h b/security/landlock/object.h > new file mode 100644 > index ..3e5d5b6941c3 > --- /dev/null > +++ b/security/landlock/object.h > @@ -0,0 +1,91 @@ > +/* SPDX-License-Identifier: GPL-2.0-only */ >

[PATCH v31 01/12] landlock: Add object management

From: Mickaël Salaün A Landlock object enables to identify a kernel object (e.g. an inode). A Landlock rule is a set of access rights allowed on an object. Rules are grouped in rulesets that may be tied to a set of processes (i.e. subjects) to enforce a scoped access-control (i.e. a domain). Be