Inconsistencies between Landlock and non-landlock mode #19

New Issue

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr commented

2021-10-26 22:28:47 +02:00

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr added the

bug

label 2021-10-26 22:28:47 +02:00

crtxcr referenced this issue from a commit

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: crtxcr/exile.h#19